locked
CRM Deployment Manager Context RRS feed

  • Question

  • Under what security context does the CRM Deployment Manager run under when it adds new users into AD security groups during Organization Import?
    Thursday, February 25, 2010 11:36 PM

Answers

  • Usually it is the Domain admin account or an account that has the permissions mentioned in the KB.
    Deployment manager can be accessed ONLY by the Deployment Administrator (the account that was used to install CRM for the first time + the accounts added to Deployment Manager as Deployment Admins post CRM installation)

    The KB articles will help you understand the permissions required.

    How to install Microsoft Dynamics CRM 4.0 with the minimum required permissions
    http://support.microsoft.com/kb/946677

    The above KB states:

    Installation options

    You have two options when you install Microsoft Dynamics CRM with the minimum required permissions. You can let the Microsoft Dynamics CRM server Setup program create the security groups during the installation. Or, you can use pre-created Active Directory security groups.

    You can also select to turn on the Auto Group Management functionality or to turn off the Auto Group Management functionality. By default, the Auto Group Management functionality is turned on. Microsoft Dynamics CRM automatically adds the appropriate user accounts and the appropriate computer accounts to the required Microsoft Dynamics CRM security groups. If you turn off Auto Group Management, Microsoft Dynamics CRM does not automatically add these accounts. In this case, a domain administrator or a user who has sufficient permissions must add the appropriate user accounts and the appropriate computer accounts to the required groups. These additions must be made after the installation and after any user is added to Microsoft Dynamics CRM.

    How to assign the minimum permissions to a deployment administrator in Microsoft Dynamics CRM 4.0
    http://support.microsoft.com/kb/946686

    • Proposed as answer by Kaustubh Giri Friday, February 26, 2010 10:00 PM
    • Marked as answer by Josh Ashwood Monday, March 8, 2010 1:57 AM
    Friday, February 26, 2010 2:26 AM

All replies

  • It uses the security context of the user who is running deployment manager.  There is a KB article that lists the minimum permissions for a user to be a CRM Deployment Administrator (i.e. a person who can run Deployment Manager).  One of these persmissions is the ability to add users to the CRM AD groups.
    Friday, February 26, 2010 12:12 AM
  • Usually it is the Domain admin account or an account that has the permissions mentioned in the KB.
    Deployment manager can be accessed ONLY by the Deployment Administrator (the account that was used to install CRM for the first time + the accounts added to Deployment Manager as Deployment Admins post CRM installation)

    The KB articles will help you understand the permissions required.

    How to install Microsoft Dynamics CRM 4.0 with the minimum required permissions
    http://support.microsoft.com/kb/946677

    The above KB states:

    Installation options

    You have two options when you install Microsoft Dynamics CRM with the minimum required permissions. You can let the Microsoft Dynamics CRM server Setup program create the security groups during the installation. Or, you can use pre-created Active Directory security groups.

    You can also select to turn on the Auto Group Management functionality or to turn off the Auto Group Management functionality. By default, the Auto Group Management functionality is turned on. Microsoft Dynamics CRM automatically adds the appropriate user accounts and the appropriate computer accounts to the required Microsoft Dynamics CRM security groups. If you turn off Auto Group Management, Microsoft Dynamics CRM does not automatically add these accounts. In this case, a domain administrator or a user who has sufficient permissions must add the appropriate user accounts and the appropriate computer accounts to the required groups. These additions must be made after the installation and after any user is added to Microsoft Dynamics CRM.

    How to assign the minimum permissions to a deployment administrator in Microsoft Dynamics CRM 4.0
    http://support.microsoft.com/kb/946686

    • Proposed as answer by Kaustubh Giri Friday, February 26, 2010 10:00 PM
    • Marked as answer by Josh Ashwood Monday, March 8, 2010 1:57 AM
    Friday, February 26, 2010 2:26 AM