web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

News and Announcements icon
Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

Unable to Create/Resolve Cases - missing prvReadIncident privilege

(0) ShareShare
ReportReport
Posted on by

A client is unable to create (save) or resolve cases even if the user trying is assigned the System Administrator role. When they try, they get the following error:

Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=8.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: Principal user (Id=02872a9f-8e1e-e611-80e6-5065f38b6141, type=8) is missing prvReadIncident privilege (Id=c2aff40c-6e68-4437-a631-488a354a1860)Detail:
<OrganizationServiceFault xmlns:i="www.w3.org/.../XMLSchema-instance" xmlns="schemas.microsoft.com/.../Contracts">
  <ActivityId>e49bb405-2a56-4b9a-9501-29e09a48062d</ActivityId>
  <ErrorCode>-2147220960</ErrorCode>
  <ErrorDetails xmlns:d2p1="schemas.datacontract.org/.../System.Collections.Generic" />
  <Message>Principal user (Id=02872a9f-8e1e-e611-80e6-5065f38b6141, type=8) is missing prvReadIncident privilege (Id=c2aff40c-6e68-4437-a631-488a354a1860)</Message>
  <Timestamp>2017-08-23T14:32:42.5197264Z</Timestamp>
  <ExceptionRetriable>false</ExceptionRetriable>
  <ExceptionSource i:nil="true" />
  <InnerFault i:nil="true" />
  <OriginalException i:nil="true" />
  <TraceText i:nil="true" />
</OrganizationServiceFault>

The users attempting this have Read privilege for both Case and Entitlement (and of course System Administrator has everything).

They have one team and it is of the type Owner. The access mode in play for users is Read-Write.

The issue appears to have started after they installed a SecurityRole_Patch_69eb5726 solution (I believe Microsoft is the publisher). It is supposed to "contain the Use Dynamics 365 App for Outlook security role.  This role only contains security updates that are required for the App to function correctly.  It does not remove any security privileges that a user has existing.”  We tried uninstalling the solution, but it did nothing to resolve the issue. Reinstalling the solution likewise did not resolve the issue.

I tried creating a security role with no privileges and adding that as a role to a user for testing per the suggestion of another post and that did not work.

Microsoft Dynamics 365 Version 1612 (8.2.1.344) (DB 8.2.1.344) online

I am struggling to figure out how a system administrator could not have adequate permissions with this issue. Anybody have any ideas how to approach resolving this? TIA.

*This post is locked for comments

I have the same question (0)
  • Aric Levin - MVP Profile Picture
    30,190 Moderator on at

    Which user is the owner of the record that you are trying save/close case?

    Make sure that owner of the record has the Read Privilege on the case entity.

    You can find which user it is, by using the following query string:

    yourorgname.crm.dynamics.com/main.aspx;extraqs=id=%7b02872a9f-8e1e-e611-80e6-5065f38b6141%7d&pagetype=entityrecord

    Hope this helps.

  • Community Member Profile Picture
    on at

    I have been testing with just trying to save a new case, so in my case, it is a user with system administrative privileges.

  • ashlega Profile Picture
    34,477 on at

    Hi Byron,

     you still need to see who is this user: 02872a9f-8e1e-e611-80e6-5065f38b6141

     It is not necessarily the user that's trying to resolve/create a case. It could be a different user that gets somehow involved through a workflow/plugin, for example.

  • Aric Levin - MVP Profile Picture
    30,190 Moderator on at

    Please check the link that I sent you to see which user it is. You might be missing something. There is a reason for that error.

  • Community Member Profile Picture
    on at

    I did an export of the users and exposed the hidden columns. The GUID doesn't match any of the listed users.  I will reach out to either our hosting service or our developer to see if they can run a query to pull the user.

  • ashlega Profile Picture
    34,477 on at

    Might be a disabled user.. did you include all users into the export?

  • Community Member Profile Picture
    on at

    Sorry. I missed you earlier reply. I substituted the orgname (client name from their URL) but I am getting an HTTP Error 404 - Not Found. Is entityrecord something that requires a substitution as well? I tried case and user with the same results.

  • Aric Levin - MVP Profile Picture
    30,190 Moderator on at

    Try the following instead:

    orgname.crm.dynamics.com/.../systemusers(02872a9f-8e1e-e611-80e6-5065f38b6141)

  • Community Member Profile Picture
    on at

    Thanks for the tip Alex. The user in play is CRM Service. It is assigned to the System Administrator role. Its access mode is administrative though (and that cannot be changed).

  • Community Member Profile Picture
    on at

    Aric - that query worked as well. Confirms the user is CRM Service.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Season of Sharing Community Challenge Launch!

Jump in, show your community spirit, and win prizes!

Women in Power Builds Momentum

Expanding mentorship, skilling, and AI innovation

Congratulations to the April Top 10 Community Leaders

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
ScottDurow Profile Picture

ScottDurow 2

#2
GJones Profile Picture

GJones 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans