locked
Limited CAL - user can still delete record created by other user RRS feed

  • Question

  • Hi,

    I set up new user in the system and I assigned him limited CAL but this user is still able to delete records created and owned by other user. Is it necessary to create a specific security role to limit this? It would be strange if the answer is "yes".

    Thanks for the answer.

    Friday, May 13, 2011 1:07 PM

Answers

  • Hi Marcin,

    The following information is taken from the CRM2011 licensing and pricing guide which is provided to Microsoft partners. This information doesn't appear in the latest training materials or in any CRM2011 books that I've looked at so far but it's very useful to know especially if you are a company who has a number of users who will just use CRM for basic functions:

    Limited CAL - The Limited CAL provides a user with full read-only access (e.g., for reports) and limited write access to “Microsoft Dynamics CRM functionality”. Users may view or query CRM data.

    The use rights supported for Limited CAL include:

    ·         Data privileges to create Accounts, Contacts, Cases, Leads, and Activities using Microsoft Dynamics CRM clients.

    ·         Data privileges to append, append to, and update Accounts, Contacts, Cases, Leads, and Activities created by any CRM user using Microsoft Dynamics CRM clients.

    ·         Data privileges to assign, share, and delete Accounts, Contacts, Cases, Leads, and Activities created by the same user using Microsoft Dynamics CRM clients.

    ·         Data privileges to create custom entity records using API access only.

    ·         Data privileges to update custom entity records created by any CRM user using API access only.

    ·         Appenddata privileges using Microsoft Dynamics CRM clients for custom activity records created by any CRM user.

    ·         Appenddata privileges using API access only for custom entity records (excluding custom activity records) created by any CRM user.

    ·         Append to data privileges using Microsoft Dynamics CRM clients for custom entity records created by any CRM user.

    ·         Data privileges to assign, share, and delete custom entity records created by the same user using API access only.

    ·         No data privileges to assign, share, or delete records created by other CRM users.

    ·         Read-only access to “Microsoft Dynamics CRM functionality”.

    The Limited CAL SKU will appear on price lists as the Dyn CRM Ltd CAL and may be purchased separately from a Microsoft Dynamics CAL.

    So to answer your question specifically, your limited use cal user will have the ability to delete records and you should be able to apply more restrictive security roles to limit this as required.

    Rob


    Microsoft Certified Technology Specialist (CRM) GAP Consulting Ltd.
    Friday, May 13, 2011 10:42 PM
    Answerer

All replies

  • Hi Marcin,

    The following information is taken from the CRM2011 licensing and pricing guide which is provided to Microsoft partners. This information doesn't appear in the latest training materials or in any CRM2011 books that I've looked at so far but it's very useful to know especially if you are a company who has a number of users who will just use CRM for basic functions:

    Limited CAL - The Limited CAL provides a user with full read-only access (e.g., for reports) and limited write access to “Microsoft Dynamics CRM functionality”. Users may view or query CRM data.

    The use rights supported for Limited CAL include:

    ·         Data privileges to create Accounts, Contacts, Cases, Leads, and Activities using Microsoft Dynamics CRM clients.

    ·         Data privileges to append, append to, and update Accounts, Contacts, Cases, Leads, and Activities created by any CRM user using Microsoft Dynamics CRM clients.

    ·         Data privileges to assign, share, and delete Accounts, Contacts, Cases, Leads, and Activities created by the same user using Microsoft Dynamics CRM clients.

    ·         Data privileges to create custom entity records using API access only.

    ·         Data privileges to update custom entity records created by any CRM user using API access only.

    ·         Appenddata privileges using Microsoft Dynamics CRM clients for custom activity records created by any CRM user.

    ·         Appenddata privileges using API access only for custom entity records (excluding custom activity records) created by any CRM user.

    ·         Append to data privileges using Microsoft Dynamics CRM clients for custom entity records created by any CRM user.

    ·         Data privileges to assign, share, and delete custom entity records created by the same user using API access only.

    ·         No data privileges to assign, share, or delete records created by other CRM users.

    ·         Read-only access to “Microsoft Dynamics CRM functionality”.

    The Limited CAL SKU will appear on price lists as the Dyn CRM Ltd CAL and may be purchased separately from a Microsoft Dynamics CAL.

    So to answer your question specifically, your limited use cal user will have the ability to delete records and you should be able to apply more restrictive security roles to limit this as required.

    Rob


    Microsoft Certified Technology Specialist (CRM) GAP Consulting Ltd.
    Friday, May 13, 2011 10:42 PM
    Answerer
  • Hi Rob

    I didn't start this post but I am having the same issue.  My limited user can delete record created and owned by other users, which according to the above, shouldn't be possible.  Not only can it do this but so far, it can do everything else that a full user can do.  What should a limited user NOT be able to do so I can test.


    Marc Collins www.QGate.co.uk
    Wednesday, May 25, 2011 2:22 PM
  • Hi Marc,

    I had this working for a recent sales demo. The easiest way to check, is try to create a record for a custom entity. The option shouldn't be available.

    Maybe the actual priveliges aren't yet perfectly aligned with the licensing guide!

    Rob


    Microsoft Certified Technology Specialist (CRM) GAP Consulting Ltd.
    Wednesday, May 25, 2011 9:38 PM
    Answerer
  • Hi Rob

    I have just finshed testing with my limited user.  I can add, delete, share etc custom entity records.  I can even add records to custom entities using our intelli-CTi software. I guess its now time to raise this with MS.


    Marc Collins www.QGate.co.uk
    Thursday, May 26, 2011 10:23 AM
  • Hi Marc,

    did you open a case with MS? Anything new regarding this topic?

     

    How are we supposed to fully test customizations if the Limited CAL isn't really limited?

     

     

    Regards

    Thursday, July 14, 2011 1:23 PM
  • Hi Matzer

    I didn't open a case for this but my MD did raise it with our MS account manager.  MS are aware of it and are trying to fix it as we speak.  I did test again after applying rollup 2 but the probelm was still there.


    Marc Collins www.QGate.co.uk
    Thursday, July 14, 2011 1:40 PM
  • Thanks Marc!

     

    Let's see how much customizations will break when this is fixed in an upcoming rollup ;)

    Thursday, July 14, 2011 7:27 PM