Answered by:
Track in CRM error (security permissions): CRM 4.0

Question
-
Hi all,
Where can I find the privileges needed to perform the "Track in CRM" action within the Outlook client.
Every users with the Salesperson role that have limited permissions (they have only access to leads actually + some others usefull privileges to perform common tasks) cannot use the Track in CRM button.
The button is viewable by users but the following message appear once they click it :
The logged-on user does not have the appropriate security permissions to view these records or perform the specific action.
Thanks for your answers
Thursday, April 3, 2008 7:58 AM
Answers
-
The main permissions you should need are Read, Create and AppendTo on the Activity entity, and Append on the Lead entity. Try this, if it doesn't work then grant Read at the user level to User, Queue, Contact and Account (I think these may be needed to allow CRM to check the email addresses)Thursday, April 3, 2008 8:49 AMModerator
All replies
-
The main permissions you should need are Read, Create and AppendTo on the Activity entity, and Append on the Lead entity. Try this, if it doesn't work then grant Read at the user level to User, Queue, Contact and Account (I think these may be needed to allow CRM to check the email addresses)Thursday, April 3, 2008 8:49 AMModerator
-
Hi David,
Many thanks for your quick response that works perfectly. I'm a bit disappointed that you need to give access to all these entities.
I perfectly understand it but if users do not have access or rights for instance to the account entities why the system will try to find an account to attach the activity ?
It should just skip to look at accounts instead of throwing an error I think !!!! I mean it is logic, no ?
One more time thanks to you
Thursday, April 3, 2008 9:20 AM -
I found that I got this error when I removed all permissions to either the Account or Contact entities for the role(s) that the current user is associated with.
Giving the role just Read rights to their own records was enough to make the Track in CRM functionality to work. True that the user would still see the entity in the UI, but if they didn't own any of them, it would be empty and they could not create any new ones...
A more detailed solution can be found at Mitch Milam's blog at: http://blogs.infinite-x.net/2008/03/05/disabling-the-lead-entity-in-crm-40/ Although he specifically talks about the Lead entity, it would apply to any entity you would want to disable.
Monday, April 21, 2008 8:45 PM -
HI,
I might have found a solution for this problem. We had one user which received "You do not have enough privileges to access the MS Dynamics CRM object or perform the requested operation" message. But the user had all the same roles as everybody else so i started digging into one of our read roles. There I found with a little bit of help from this page that after I added ALL the permissions to the activity entity:
And then removed all of the ones I added and than user could track a new meeting request without any error messages.
In my humble opinion the user gets "stuck" when you change his permissions, it does not have to be necessarily permissions in CRM, could be also in Active Directory. This workaround somehow resets the permissions and frees the user from the chains of error message. Maybe for you facing the same issues you need to do this for a another entity.
Wednesday, July 2, 2014 1:52 PM