When creating fine-tuned roles for restricted access to your Dynamics CRM deployment, be very careful about privileges granted on Customization tab in role editor. Some of the privileges are easy to overlook and, if not granted, that can break the user experience. What I learned today is that CRM is very sensitive about Process privileges. […]
Tip #760: Scope your workflows
Admit it: when you create a new workflow, one of the first actions is to set the scope of the workflow to Organization. After all, when something changes, or new record is created, we want apply our business rules across the board, right? Most of the time you’d be correct. But this is an opportunity […]
Tip #758: When users are unable to save personal views
tl;dr When no one in your organization including system administrators can create or update personal views, check that you don’t have any plugins registered on all entities to run in a context different from a calling user. Mundane details Symptoms: when personal views are created or updated, all users including system administrators receive the following […]
Tip #753: CRM Portal Security
In this video, we look at the different Authentication & Authorization options for Dynamics CRM Portal capabilities. We walk through an overview of the elements, and then explore how to access and change them. Give us your feedback, all of it: good, bad, and ugly, I’m sure we can take it. Suggest new topics either […]
Tip #751: When only some views fail
Symptom Users can freely access entity records in some views but not the others – instead they receive the following error: You do not have permission to access these records. Contact your Microsoft Dynamics CRM administrator. Solution Check that the views that generate “access denied” error do not include fields from the parent entity users […]
Tip #711: Record merge fails when assignee has insufficient privileges
Guido “Trekkie not Star Wars fan” Preite is not the man to puzzle easily but even he was confused: Someone faced this error before? “Assignee has insufficient privileges” when merging two contacts. The User is System Administrator and the same user is the owner of both records. No plugins running on the merge message. CRM […]
Tip #702: How to tell apart system roles and their clones
It’s been a while since we had a truckstop but Larry “Tex” Lentz keeps asking questions on behalf of some mysteryous “students”. Let’s stop and listen. How can one tell if a security role is a copy and which role it’s a copy of? Feridun “Best Twitter Handle for CRM MVP” Kadir closed the discussion […]
Tip #690: No field level security for alternate keys
There were many people taking part in this discussion but I’m just going to take all the credit for providing the summary here. Contributors can claim the free drink from me when we meet. If you are planning to use alternate keys to access CRM data, keep in mind that the fields with field […]
Tip #680: No more excuses for not using SSL
We all know about the goodness of SSL. CRM Online and On-premises IFD deployments won’t work without it. However, when it comes to creating and consuming web services, people become incredibly lax about using SSLs and happy to transmit even confidential information using plain http. Excuse is usually down the “who needs this information anyway” […]
Tip #677: Don’t give users and teams the same role
Consider this scenario: You create a base role that you assign to your users that contains business unit read access to core entities, and assign this role to all of your users. Good idea! You must have read tip 2. You then decide to give the same role to a few teams, because the teams […]