Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Customer experience | Sales, Customer Insights,...
Answered

configure a role for read only access to all entities

(0) ShareShare
ReportReport
Posted on by 10

hi,

I want to create a role for an application user, that can can do following:

1. read all current entities

2. if a new entity is added, the role can still read that entity without re-configure the security role

the closest one is system admin but i dont want to attach system admin to my application user.

Does anyone know how to do this?

  • Suggested answer
    Adrian Begovich Profile Picture
    Adrian Begovich 1,019 Super User 2025 Season 1 on at
    RE: configure a role for read only access to all entities

    Hi matthew123,

    The security role will need to be modified to provide read privileges to the new custom entity.

  • matthew123 Profile Picture
    matthew123 10 on at
    RE: configure a role for read only access to all entities

    thanks for replying.

    assuming i have the role created, and then if I add a new custom entity, can my application user still be able to read the custom entity without making any changes to the role?

  • Suggested answer
    Adrian Begovich Profile Picture
    Adrian Begovich 1,019 Super User 2025 Season 1 on at
    RE: configure a role for read only access to all entities

    Hi Matthew123,

    Create a new security role and assign it to the application user. Make sure that user only has this security role as security role privileges are cumulative. 

    The security role requires these privileges:

    Core Records

    • {All Entities}: Read(Organization)
    • User Entity UI Settings: Create(User), Read(User), Write(User)

    Business Management

    • User Settings: Read(User)

    Customization

    • Customizations: Read(Organization)
    • System Form: Read(Organization)
    • View: Read(Organization)
    • Web Resource: Read(Organization)

    It is helpful to keep in mind the minimum privileges you need to define for some common tasks. These include:

    Logging in to Microsoft Dynamics CRM Online

    • To render the home page: prvReadWebResource, prvReadCustomization
    • To render an entity grid (that is, to view lists of records and other data): Read privilege on the entity, prvReadUserSettings, prvReadQuery
    • To view single entities in detail: Read privilege on the entity, prvReadSystemForm, prvCreateUserEntityUISettings, prvReadUserEntityUISettings

    Logging in to Microsoft Dynamics CRM Online for Outlook

    • To render navigation for Microsoft Dynamics CRM Online and all Microsoft Dynamics CRM Online buttons: prvReadEntity, prvReadQuery
    • To render an entity grid: Read privilege on the entity, prvReadCustomization, prvReadWebResource, prvReadUserQuery
    • To render entities: Read privilege on the entity, prvReadSystemForm, prvCreateUserEntityUISettings, prvReadUserEntityUISettings, prvWriteUserEntityUISettings

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Daivat Vartak – Community Spotlight

We are honored to recognize Daivat Vartak as our March 2025 Community…

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Kudos to the February Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 292,516 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 231,432 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans