How to set permissions so that certain users can't access account records RRS feed

  • Question

  • Hi All,

    I need to know how to set up Dynamics CRM so that certain users can't access specific accounts and contacts records. Is this possible?


    Wednesday, February 5, 2014 11:16 AM

All replies

  • This is done through the security roles that you assign to the users.

    For example, the security role you will assign will have several settings for Accounts.  You will need to set the permission level for Read, Create, Delete, Append, Append To, etc. for each entity.

    At the bottom, you will see a chart showing how full the circle should be.  You would want to set the read level to user level for Accounts.  This means that the users can only see the Accounts they own.

    You would want to do the same for the other record types.

    Care should be taken and you should test the changes you make because some privileges are dependant on other privileges.  So should not make a large number of changes or strip out the security role all at once.

    I also recommend that you copy the security role and make the changes to the copy.  You can then rename the copy.  This way you always have the original to reference if something doesn't work.

    Also, you may notice that users can have more than one security role.  This means that the same privilege would overlap.  In this case, CRM will use the higher privilege.  Meaning if one security role gave user level read privileges for Accounts, and the other security role gave business unit level read privileges for Accounts, then the user now has business unit level read privileges for Accounts.  So when testing, keep it simple and only assign 1 security role to the user.

    You will later find that teams can be assigned security roles and when you bring in different business units, things can become complex with security roles.

    Jason Peterson

    Wednesday, February 5, 2014 11:38 AM
  • check out on security roles and Access level privilages by using this 2 concepts you can achieve ur functionality...

    ms crm

    Wednesday, February 5, 2014 12:09 PM