Customer Engagement & Dynamics CRM Forum

Expand all | Collapse all

"Access Denied" with no details

  • 1.  "Access Denied" with no details

    Posted 16 days ago
    Good morning.  Long story short, we're trying to set up our new D365 system with business units that can only see entities within their own BUs.  (We've been using CRM 2011 for about seven years, so I'm no stranger to Dynamics CRM overall; just trying to adapt to this wholesale upgrade.)  While testing, I'm getting an "Access Denied" error message, but I can't find any clues as to what specifically is being denied.  The usually helpful "Download Log File" button only re-displays the text of the error message I already have...no AccessCheckEx, no GUIDs, nothing.  The server's Event Viewer doesn't seems to have any useful logs either.  It's not a plug-in at fault, so there's nothing under Settings > Plug In Trace Log.  Any ideas?

    ------------------------------
    Joseph Thiel
    Software Engineer
    Per Mar Security
    Davenport IA
    ------------------------------
    Conference-CRMUG_200x200


  • 2.  RE: "Access Denied" with no details

    MICROSOFT MVP
    Posted 16 days ago
    Hello Joseph,
    Turn on tracing.
    Restart IIS.
    Reproduce an error.
    Check trace folder for logs.

    ------------------------------
    Andrew Butenko
    ------------------------------

    Conference-CRMUG_200x200


  • 3.  RE: "Access Denied" with no details

    Posted 16 days ago
    Did the job, thank you!!  I was wondering whatever happened to that original tracing process.

    ------------------------------
    Joseph Thiel
    Software Engineer
    Per Mar Security
    Davenport IA
    ------------------------------

    Conference-CRMUG_200x200


  • 4.  RE: "Access Denied" with no details

    GOLD CONTRIBUTOR
    Posted 16 days ago
    If you move to Online at some point and lose the ability to do tracing, you can use f12 debugging to get more detailed error information. I have found f12 debugging on the browser to be very helpful when the Download Log File link does not have enough detail. In f12 debugging you can see the specific privilege that is missing. For example, you may see something like "Principle user is missing prvReadAccount privilege".

    ------------------------------
    Andy Arndt
    Minitab, Inc.
    State College PA
    ------------------------------

    Conference-CRMUG_200x200


If you've found this thread useful, dive deeper into User Group community content by role