Article ID: 957976 - Last Review: January 8, 2009 - Revision: 1.0

Some privileges are missing from a security role that you create from scratch in Microsoft Dynamics CRM 4.0

View products that this article applies to.

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

Expand all | Collapse all

SYMPTOMS

Consider the following scenario. You apply hotfix 950886 for Microsoft Dynamics CRM 4.0. Then, you create a security role from scratch in Microsoft Dynamics CRM 4.0. In this scenario, some privileges are missing for the new security role.

For more information about hotfix 950886, click the following article number to view the article in the Microsoft Knowledge Base:

950886 (http://support.microsoft.com/kb/950886/ ) Error message when you start the report wizard or when you perform the Bulk Import activity in Microsoft Dynamics CRM 4.0: "The logged on user does not have the appropriate security permissions to view these records or perform the specific action"

Back to the top

CAUSE

Microsoft Dynamics CRM uses internal privileges to perform system operations. These privileges are restricted based on roles. Some privileges that are not active in Microsoft Dynamics CRM 4.0 are hidden privileges. The Administrator role contains many hidden privileges that let the administrator perform actions that a person who has a Sales Person role cannot perform. The same is true when you create an Administrator role from scratch. The role that has all privileges selected on the Role Edit form is not equal to the built-in System Administrator role.

Back to the top

WORKAROUND

After you apply hotfix 950886, roles that are created from scratch may contain missing hidden privileges that are on the Sales Person, Customer Service Representative, Marketing Professional, or Schedule Manager role. This only occurs if you copy roles from existing roles.

If you must have additional hidden privileges, copy specific roles to grant the correct level of access. If you copy a System Administrator role, elevated privileges that should be granted to higher level users only are granted to the user to perform specific internal operations. After you apply hotfix 950886, you still do not have privileges for existing roles that were created from scratch. To grant users specific hidden privileges for existing roles, use a combination of roles or use the CRM 4.0 SDK to insert privileges on a role. If your organization has a large number of business units, you may want to use the CRM 4.0 SDK to insert privileges.

If the existing roles do not contain hidden privileges or if they require additional hidden privileges, follow these steps to work around this problem:

Copy the built-in role (some roles contain the same hidden privileges), and then name the new role. For example, name the role "CSR Manager -Hidden Privileges."
Remove all privileges from the role, and then save it.
Assign this role and the required built-in role to the user to grant the user the hidden privileges.

Back to the top

MORE INFORMATION

The following table describes the roles that contain hidden privileges and a brief description of the privilege.

Collapse this tableExpand this table

Role	Hidden privilege	Description
Scheduler	prvAppendQueue	Append Privilege on Queue
Sales Manager and Marketing Manager	prvReparentTeam	Change Team's Business Unit
Support User	prvReadSdkMessageProcessingStepSecureConfig	Read SDK Message Processing Step
Vice President of Marketing, Vice President of Sales, and CSR Manager	prvAppendQueue	Append Privilege on Queue
Vice President of Marketing, Vice President of Sales, and CSR Manager	prvReparentTeam	Change Team's Business Unit
CEO-Business Manager	prvAppendQueue	Append Privilege on Queue
CEO-Business Manager	prvAppendBusinessUnit	Append Privilege on Business Unit
CEO-Business Manager	prvReparentTeam	Change Team's Business Unit
System Customizer	prvAppendAttributeMap	Append Privilege on Attribute Map
System Customizer	prvAppendQueue	Append Privilege on Queue
System Customizer	prvAppendToAttributeMap	Append Privilege on Attribute Map
System Customizer	prvAppendToEntityMap	Append to Privilege on Entity Map
System Customizer	prvCreateApplicationFile	Required for users who are running setup or upgrade
System Customizer	prvCreateAttributeMap	Create Privilege on Attribute Map
System Customizer	prvCreateCustomization	Privilege needed to create new customizations and Display Strings
System Customizer	prvCreateEntityMap	Create Entity Map
System Customizer	prvCreatePluginAssembly	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvCreateSdkMessageProcessingStep	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvCreateSdkMessageProcessingStepImage	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvCreateSdkMessageProcessingStepSecureConfig	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteApplicationFile	Required for users who are running setup or upgrade
System Customizer	prvDeleteAttributeMap	Delete Attribute Map
System Customizer	prvDeleteCustomization	Delete Customizations
System Customizer	prvDeleteEntityMap	Delete Entity Maps
System Customizer	prvDeletePluginAssembly	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteSdkMessageProcessingStep	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteSdkMessageProcessingStepImage	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteSdkMessageProcessingStepSecureConfig	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvReadSdkMessageProcessingStepSecureConfig	Read SDK Message Processing Step
System Customizer	prvWriteApplicationFile	Required for users who are running setup or upgrade
System Customizer	prvWriteAttributeMap	Write Attribute Map
System Customizer	prvWriteEntityMap	Write Entity Map
System Customizer	prvWritePluginAssembly	Needed for registering plugins (Not applicable for CRM Online)
System Customizer	prvWriteSdkMessageProcessingStep	Needed for registering plugins (Not applicable for CRM Online)
System Customizer	prvWriteSdkMessageProcessingStepImage	Needed for registering plugins (Not applicable for CRM Online)
System Customizer	prvWriteSdkMessageProcessingStepSecureConfig	Needed for registering plugins (Not applicable for CRM Online)
System Administrator	prvAppendAsyncOperation	Append Privilege on Asynchronous Operation
System Administrator	prvAppendAttributeMap	Append Privilege on Attribute Map
System Administrator	prvAppendBusinessUnit	Append Privilege on Business Unit
System Administrator	prvAppendQueue	Append Privilege on Queue
System Administrator	prvAppendToAttributeMap	Append Privilege on Attribute Map
System Administrator	prvAppendToEntityMap	Append to Privilege on Entity Map
System Administrator	prvAppendToOrganization	AppendTo Privilege on Organization
System Administrator	prvBulkDelete	Privilege needed to run Bulk Delete jobs
System Administrator	prvCreateApplicationFile	Required for users who are running setup or upgrade
System Administrator	prvCreateAsyncOperation	Create Privilege on Asynchronous Operation
System Administrator	prvCreateAttributeMap	Create Privilege on Attribute Map
System Administrator	prvCreateCustomization	Privilege needed to create new customizations and Display Strings
System Administrator	prvCreateEntityMap	Create Entity Map
System Administrator	prvCreatePluginAssembly	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreatePluginType	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreateSdkMessageProcessingStep	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreateSdkMessageProcessingStepImage	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreateSdkMessageProcessingStepSecureConfig	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteApplicationFile	Required for users who are running setup or upgrade
System Administrator	prvDeleteAttributeMap	Delete Attribute Map
System Administrator	prvDeleteCustomization	Delete Customizations
System Administrator	prvDeleteEntityMap	Delete Entity Maps
System Administrator	prvDeletePluginAssembly	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeletePluginType	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteSdkMessageProcessingStep	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteSdkMessageProcessingStepImage	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteSdkMessageProcessingStepSecureConfig	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvOverrideCreatedOnCreatedBy	Data Migration privilege that enables a data migration user to preserve created by values on records imported during migration.
System Administrator	prvReadSdkMessageProcessingStepSecureConfig	Read SDK Message Processing Step
System Administrator	prvReparentTeam	Reparent Team - Change Team's Business Unit
System Administrator	prvWriteApplicationFile	Required for users who are running setup or upgrade
System Administrator	prvWriteAttributeMap	Write Attribute Map
System Administrator	prvWriteEntityMap	Write Entity Map
System Administrator	prvWritePluginAssembly	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWritePluginType	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWriteSdkMessageProcessingStep	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWriteSdkMessageProcessingStepImage	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWriteSdkMessageProcessingStepSecureConfig	Needed when Registering Plugins (Not applicable for CRM Online)