web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Customer experience | Sales, Customer Insights,...
Answered

configure a role for read only access to all entities

(0) ShareShare
ReportReport
Posted on by 10

hi,

I want to create a role for an application user, that can can do following:

1. read all current entities

2. if a new entity is added, the role can still read that entity without re-configure the security role

the closest one is system admin but i dont want to attach system admin to my application user.

Does anyone know how to do this?

I have the same question (0)
  • Suggested answer
    Adrian Begovich Profile Picture
    1,027 Moderator on at

    Hi Matthew123,

    Create a new security role and assign it to the application user. Make sure that user only has this security role as security role privileges are cumulative. 

    The security role requires these privileges:

    Core Records

    • {All Entities}: Read(Organization)
    • User Entity UI Settings: Create(User), Read(User), Write(User)

    Business Management

    • User Settings: Read(User)

    Customization

    • Customizations: Read(Organization)
    • System Form: Read(Organization)
    • View: Read(Organization)
    • Web Resource: Read(Organization)

    It is helpful to keep in mind the minimum privileges you need to define for some common tasks. These include:

    Logging in to Microsoft Dynamics CRM Online

    • To render the home page: prvReadWebResource, prvReadCustomization
    • To render an entity grid (that is, to view lists of records and other data): Read privilege on the entity, prvReadUserSettings, prvReadQuery
    • To view single entities in detail: Read privilege on the entity, prvReadSystemForm, prvCreateUserEntityUISettings, prvReadUserEntityUISettings

    Logging in to Microsoft Dynamics CRM Online for Outlook

    • To render navigation for Microsoft Dynamics CRM Online and all Microsoft Dynamics CRM Online buttons: prvReadEntity, prvReadQuery
    • To render an entity grid: Read privilege on the entity, prvReadCustomization, prvReadWebResource, prvReadUserQuery
    • To render entities: Read privilege on the entity, prvReadSystemForm, prvCreateUserEntityUISettings, prvReadUserEntityUISettings, prvWriteUserEntityUISettings
  • matthew123 Profile Picture
    10 on at

    thanks for replying.

    assuming i have the role created, and then if I add a new custom entity, can my application user still be able to read the custom entity without making any changes to the role?

  • Suggested answer
    Adrian Begovich Profile Picture
    1,027 Moderator on at

    Hi matthew123,

    The security role will need to be modified to provide read privileges to the new custom entity.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > Customer experience | Sales, Customer Insights, CRM

#1
Tom_Gioielli Profile Picture

Tom_Gioielli 170 Super User 2025 Season 2

#2
#ManoVerse Profile Picture

#ManoVerse 61

#3
Gerardo Rentería García Profile Picture

Gerardo Rentería Ga... 52 Most Valuable Professional

Last 30 days Overall leaderboard

Product updates

Dynamics 365 release plans