Customer Engagement & Dynamics CRM Forum

Expand all | Collapse all

Security Roles - deeper explanations?

  • 1.  Security Roles - deeper explanations?

    GOLD CONTRIBUTOR
    Posted 16 days ago
    Does anyone know if there are there any resources out there that that go into deeper explanations as to what these line items do in security roles? Like all the tendrils as they reach into the system do X if you change (or break!) Y? Some of it is fairly self explanatory but there are times I find myself looking at an item and wonder wth does that do? :)

    ------------------------------
    Gretchen Garcia
    IT Technician
    Denver Public Library
    Denver CO
    ------------------------------


  • 2.  RE: Security Roles - deeper explanations?

    GOLD CONTRIBUTOR
    Posted 16 days ago
    Hi Gretchen, is this helpful at all? https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/security-roles-privileges

    ------------------------------
    Sissy Bottcher
    Business Process Innovation Specialist
    Dynamics 365 for Sales Enterprise (Online v.9)
    San Diego CA
    ------------------------------



  • 3.  RE: Security Roles - deeper explanations?

    GOLD CONTRIBUTOR
    Posted 16 days ago
    Hi Sissy! I've seen that article but it doesn't get to the meat of what I'm asking. I'm after more of a line by line if you change "App" for instance, this is what breaks. (Something we recently had to learn about.) :P  Like, the social pane seems to be affected by the Activity row somehow - but how on the heck would I have known that if not for some cryptic post I found with developers talking about something in the same area that led me to believe that if I changed permissions here, it might fix the user? (Esp since the activity pane doesn't have it's own set of permissions which it really really really needs.)

    ------------------------------
    Gretchen Garcia
    IT Technician
    Denver Public Library
    Denver CO
    ------------------------------



  • 4.  RE: Security Roles - deeper explanations?

    GOLD CONTRIBUTOR
    Posted 16 days ago
    I remember that I was once looking for that type of information as well but also couldn't find anything. Would be great if that was part of Microsoft's standard documentation somewhere. Many entities are straightforward but then there are the ones that are not... and those are just trial and error for me as well.

    ------------------------------
    Sissy Bottcher
    Business Process Innovation Specialist
    Dynamics 365 for Sales Enterprise (Online v.9)
    San Diego CA
    ------------------------------



  • 5.  RE: Security Roles - deeper explanations?

    GOLD CONTRIBUTOR
    Posted 16 days ago
    Bummer. I was hoping it was one of those lingo bits I hadn't managed to figure out yet...  Yes - documentation would be ideal but no one else appears to have made some either sadly.

    ------------------------------
    Gretchen Garcia
    IT Technician
    Denver Public Library
    Denver CO
    ------------------------------



  • 6.  RE: Security Roles - deeper explanations?

    SILVER CONTRIBUTOR
    Posted 15 days ago
    Here is a link to each of the specific privileges that the security roles provide.  This has come in VERY handy to have when presented with very annoying error messages that states a specific privilege is missing.  Such as: "ActivityId":"fcd4110f-5760-486b-87ff-a240813d2847","errorCode":2147746336,"message":"Principal user (Id=5c50988f-d5a5-e611-80ec-1458d05b422c, type=8, accessMode= 0, roleCount=2, privilegeCount=279, is missing prvReadQueue privilege (Id=b140e729-dfeb-4ba1-a33f-39ff830bac90","stacktrace":" 

    Hope this helps
    https://docs.microsoft.com/en-us/previous-versions/dynamicscrm-2016/developers-guide/hh547441(v=crm.8)

    ------------------------------
    Lance Day
    Systems Analyst, CRM
    Dunbar Armored
    Carlisle PA
    ------------------------------



  • 7.  RE: Security Roles - deeper explanations?

    GOLD CONTRIBUTOR
    Posted 15 days ago
    Thank you Lance! That's a huge step in the right direction. :)

    ------------------------------
    Gretchen Garcia
    IT Technician
    Denver Public Library
    Denver CO
    ------------------------------



  • 8.  RE: Security Roles - deeper explanations?

    SILVER CONTRIBUTOR
    Posted 15 days ago
      |   view attached
    Sure thing Grethen, glad to help :)  Also, on that same site, if you scroll through the nav items on the left panel, there are tons of links to specific privs and explanations of what they provide.  It's the most detailed site I've seen for D365 security.

    Going beyond this a bit, and not sure if you would need this or not, but I need to document all of our security roles and what each of them provide outside of the system.  There is a tool in the XRMToolBox that can export the roles to Excel, however the app seems to throw a wonderful "unhandled exception error" so I had to come up with my own solution for this.  It is a manual process, but the attached spreadsheet is setup just as the tabs are in the sec role, the blacked out fields are where there are no privs for that item and they are locked on the sheet.  All open fields had drop down values for priv level.  Just match up the cells with the entity, priv and priv level, save the file as your sec role name and there ya have it.  It has come in handy for me, so I thought I would share it out in case anyone else would also have a need for this, it is also out in my Library files on the UG site.

    Thanks and have a great day :)

    ------------------------------
    Lance Day
    Systems Analyst, CRM
    Carlisle Construction Materials
    Carlisle PA
    ------------------------------

    Attachment(s)



  • 9.  RE: Security Roles - deeper explanations?

    GOLD CONTRIBUTOR
    Posted 14 days ago
    Awesome!! I think that would be a good idea to document the roles outside of CRM as well. Thanks for that spreadsheet!

    ------------------------------
    Gretchen Garcia
    IT Technician
    Denver Public Library
    Denver CO
    ------------------------------



  • 10.  RE: Security Roles - deeper explanations?

    SILVER CONTRIBUTOR
    Posted 14 days ago
    Edited by Lance Day 14 days ago
    It's tedious as all get out, but could prove worth it.  I have noticed that some cells may need unlocked based on entity differences between roles, if you need to unlock the cells, the pwd is Ld7569**

    ------------------------------
    Lance Day
    Systems Analyst, CRM
    Carlisle Construction Materials
    Carlisle PA
    ------------------------------



If you've found this thread useful, dive deeper into User Group community content by role