Custom security roles do not work after you upgrade from Microsoft Dynamics CRM 2011 to Microsoft Dynamics CRM 2013

This article provides a solution to an issue where custom security roles don't work in Microsoft Dynamics CRM 2013.

Applies to:   Microsoft Dynamics CRM 2013
Original KB number:   2923723

Symptoms

Custom security roles don't work after you upgrade from Microsoft Dynamics CRM 2011 to Microsoft Dynamics CRM 2013. When you sign into Dynamics CRM 2013 and try to access the records, you receive an insufficient permissions error. There's no definite behavior on the accessibility of records. It may occur for existing or newly created users who have custom security roles.

Cause

After you upgrade from Dynamics CRM 2011 to Dynamics CRM 2013, the prvReadComplexControl (process configuration) privilege becomes one of the required privileges to access records or to sign in.

Resolution

To resolve this issue, you can assign read privilege to process configuration under the customization tab for the affected custom security role.

More information

Default security roles work as expected.