Dynamics CRM, Security, Troubleshooting

Dynamics CRM – You do not have permission to access these records. AKA Sometimes CRM will lie right to your face

Sometimes CRM will give you the following message when you are attempting to assign a record to another user

Insufficient Permissions
*You* do not have permissions to access these records. Contact your Microsoft Dynamics CRM administrator

Insufficient Permissions

Be aware that sometimes this message is flat out misleading. If you are getting this error message whilst logged in a System Administrator there is a very good chance that the permission issue isn’t with your account, it’s an issue with the user you are attempting to assign the record to

If you are struggling to infer what the missing privilege is, the nuclear option is to run a CRM trace whilst attempting to assign the record. Run the trace and you should eventually find something like the following:

Missing privilege on the Invoice entity
Missing read privilege on the Invoice entity

In our case we were attempting to assign an account to a new user. In our environment we don’t use the Invoice feature of CRM meaning most users don’t even have the ability to Read Invoices. By an unhappy coincidence a user that did have the ability to play with invoices had created a test record under the account in question. At some point much later we then attempted to assign the account to one of the many users who don’t have the Read privilege – then BANG – unhelpful error message…

Lesson: If you get the Insufficient Permissions error message as a System Administrator whilst assigning a record – its probably not your permissions that are the problem

Start up a trace and it should hopefully lead you straight to the missing privilege

Good luck!


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s