Customer Engagement & Dynamics CRM Forum

 View Only
Expand all | Collapse all

Insufficient Permissions to create record even as admin

  • 1.  Insufficient Permissions to create record even as admin

    Posted Jan 03, 2020 12:28 PM
    I recently switched to the Unified Interface and didn't mess with security roles. I also migrated marketing automation platforms so to be honest I'm not entirely sure if the UI switch is the problem.

    Any time someone tries to create a lead or account, we get the Insufficient Permissions error that states You do not have {0} permission to access {1} records.

    Even as an admin, I can't create anything. I'm not sure if the log file is giving me detail to know what this 1 record is, because I don't know how to interpret the data well enough.

    I was going through security roles and added full create/read/write privileges on things in the business process flows and custom entities, but when I realized the sys admin also can't create, I guess that's a moot point.

    Is there a way for me to figure out what this 1 record is?

    Thanks!



    ------------------------------
    Brooke Browne
    Marketing Director
    Smartbridge
    Houston TX
    ------------------------------


  • 2.  RE: Insufficient Permissions to create record even as admin

    D365UG/CRMUG ALL STAR
    Posted Jan 03, 2020 01:21 PM
    Edited by Heidi Neuhauser Jan 03, 2020 01:23 PM

    For the users, security roles are OK? They have READ permission on all entities they need?

    ------------------------------
    Heidi Neuhauser
    Director, CRM Projects
    Reenhanced
    Green Lane PA
    ------------------------------



  • 3.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 03, 2020 01:45 PM
    @Heidi Neuhauser - yep! They have read permission on everything in core and custom records, and probably a bunch of other things they don't need. 

    I also tried creating a lead with Quick Create, and it still threw the error. The fields on the quick create form are fairly basic. ​​

    ------------------------------
    Brooke Browne
    Marketing Director
    Smartbridge
    Houston TX
    ------------------------------



  • 4.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 03, 2020 01:48 PM
    If you are online, you will need to check with Microsoft.  In the on-prem days, we would turn tracing on the servers and would get a more robust error to track down..  
    Are there js scripts running on the for form for OnLoad or OnSave for that form?

    ------------------------------
    Beth Burrell , MCP - MCSE - MCT

    Wesley Chapel FL
    ------------------------------



  • 5.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 03, 2020 02:00 PM
    Thanks @Beth Burrell - I am online. I don't think there should be scripts running. I'm a CRM admin by default but at best a 'configurer', so we haven't done anything complex beyond workflows :)​

    ------------------------------
    Brooke Browne
    Marketing Director
    Smartbridge
    Houston TX
    ------------------------------



  • 6.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 03, 2020 01:57 PM
    I also have found some good articles on how to read the error logs, but my error log doesn't contain the information I need - it looks completely different from the blog examples. 

       at Microsoft.Crm.Extensibility.OrganizationSdkServiceInternal.CreateInternal(Entity entity, InvocationContext invocationContext, CallerOriginToken callerOriginToken, WebServiceType serviceType, Boolean checkAdminMode, Dictionary`2 optionalParameters)
       at Microsoft.Crm.Extensibility.OData.CrmODataExecutionContext.CreateOrganizationResponse(Entity entity)
       at Microsoft.Crm.Extensibility.OData.CrmODataServiceDataProvider.CreateEdmEntity(CrmODataExecutionContext context, String edmEntityName, EdmEntityObject entityObject, Boolean isUpsert)
       at Microsoft.Crm.Extensibility.OData.EntityController.PostEntitySetImplementation(String& entitySetName, EdmEntityObject entityObject)
       at Microsoft.PowerApps.CoreFramework.ActivityLoggerExtensions.Execute[TResult](ILogger logger, EventId eventId, ActivityType activityType, Func`1 func, IEnumerable`1 additionalCustomProperties)
       at Microsoft.Xrm.Telemetry.XrmTelemetryExtensions.Execute[TResult](ILogger logger, XrmTelemetryActivityType activityType, Func`1 func)
       at lambda_method(Closure , Object , Object[] )
       at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.<GetExecutor>b__9(Object instance, Object[] methodParameters)
       at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken)
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at System.Web.Http.Controllers.ApiControllerActionInvoker.<InvokeActionAsyncCore>d__0.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at System.Web.Http.Controllers.ActionFilterResult.<ExecuteAsync>d__2.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at System.Web.Http.Dispatcher.HttpControllerDispatcher.<SendAsync>d__1.MoveNext()
    Activity Id: b6a00d61-17f1-46fa-b91d-c51badeb4026​


    ------------------------------
    Brooke Browne
    Marketing Director
    Smartbridge
    Houston TX
    ------------------------------



  • 7.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 03, 2020 02:11 PM
    I would open a case with Microsoft.   I know you don't have North 52 but they opened an MS ticket because of a Web API call and it looks almost exactly like your error
    https://support.north52.com/knowledgebase/article/KA-02177-dynamics-crm-365-Known-Microsoft-issues-5-Release-902438/en-us


    ------------------------------
    Beth Burrell , MCP - MCSE - MCT

    Wesley Chapel FL
    ------------------------------



  • 8.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 03, 2020 02:16 PM
    Okay thanks! I just submitted the ticket, so I'll update if they figure it out.....

    ------------------------------
    Brooke Browne
    Marketing Director
    Smartbridge
    Houston TX
    ------------------------------



  • 9.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 06, 2020 11:25 AM
    SOLVED!

    Microsoft tech support identified a particular global admin user that needed an admin role, despite the fact that they aren't a CRM 'user'. For some reason there are some plugins where he is the owner. I'm not sure what 'plugins' it's referring to, or how to see them and change the owner to our true Dynamics admin, but once I did that, it worked again.

    ------------------------------
    Brooke Browne
    Marketing Director
    Smartbridge
    Houston TX
    ------------------------------



  • 10.  RE: Insufficient Permissions to create record even as admin

    TOP CONTRIBUTOR
    Posted Jan 06, 2020 11:27 AM
    @Brooke Browne I had this problem too in UCI. I could not edit existing records or add new ones. The fix ended up being pretty simple. It may not be the same issue, but check out the Discussion thread. ​

    ------------------------------
    Audrey Forrest
    Senior Accountant and Business Analyst
    Seattle WA
    CRMUG Co-Chapter Leader - Seattle
    D365 CRM V9, GP 2015 R2
    ------------------------------



  • 11.  RE: Insufficient Permissions to create record even as admin

    Posted Jan 06, 2020 12:20 PM
    OMG if that is the answer it will be great but sad for sure. @Brooke Browne Please let us know the fix..

    thanks​

    ------------------------------
    Beth Burrell , MCP - MCSE - MCT

    Wesley Chapel FL
    ------------------------------



If you've found this thread useful, dive deeper into User Group community content by role