A user who has the Assign Role privilege in a child business unit can unexpectedly assign the System Administrator role in Microsoft Dynamics CRM 4.0

This article has been archived. It is offered "as is" and will no longer be updated.
Symptoms
In Microsoft Dynamics CRM 4.0, a user who has the Assign Role privilege in a child business unit can unexpectedly assign the System Administrator role.
Cause
This problem occurs because the System Administrator role is automatically cascaded down to all child business units. Additionally, the System Administrator role cannot be changed.
Resolution
This problem is fixed in the latest cumulative update rollup for Microsoft Dynamics CRM 4.0. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
949256 Microsoft Dynamics CRM 4.0 updates and hotfixes
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More information
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
For more information about Microsoft Dynamics CRM software hotfix and update package terminology, click the following article number to view the article in the Microsoft Knowledge Base:
887283 Microsoft Business Solutions CRM software hotfix and update package naming standards
This hotfix prevents users who have a lesser privilege depth for a specific privilege to assign themselves or another user a role that contains the same specific privilege but at a greater depth.
Properties

Article ID: 955685 - Last Review: 01/15/2015 16:02:57 - Revision: 4.0

  • Microsoft Dynamics CRM 4.0
  • kbnosurvey kbarchive kbfix kbautohotfix kbexpertiseinter kbsurveynew kbmbsmigrate kbqfe kbHotfixServer KB955685
Feedback