locked
Dashboard insufficient rights RRS feed

  • Question

  • Hello,

    I've installed Microsoft Dynamics CRM 2013 on a windows 2008 server.

    I've added a few users.
    When logging in with 2 or 3 users they are getting the error "Insufficient Permissions" when viewing posts in the dashboard.
    If i add a new user, with the same roles. This user can see there posts on the dashboard. What can be the problem?


    Best regards, Joost Lauwen

    Tuesday, February 25, 2014 8:18 AM

All replies

  • Are all these users in the same business unit?

    Does the user have the same error if you temporarily give them the sys admin security role?


    Jason Peterson

    Tuesday, February 25, 2014 1:57 PM
  • Hello Jason,

    Thank for your reply!

    The users are in the same business unit. There is only one business unit in the system. It is a new installation.
    I have also tried to give them sys admin roles, this doesn't work.

    Is there a possibility to delete the user from CRM and recreate it again? Disabling and enabling the user is not working as well.


    Best regards, Joost Lauwen

    Wednesday, February 26, 2014 8:09 AM
  • You can't delete users in CRM.  Only disable.  It is possible to re-associate the CRM User record with another AD user, but I don't think this is the main issue.

    1. Check to make sure the users are in the ReportingGroup in AD.  Not completely sure but maybe the query that is pulling the data for the dashboard is relying on the privilege for reports.  And users need to be in this group to run reports.  Sometimes there can be an issue where a new user is not added.  If the user is not in the ReportingGroup, then manually add the user.

    2. Check to see if the affected user is able to go to and open one of the records that he can't see in the dashboard.  You can even do an Advanced Find to see if he can read the records.  The user needs to be able to actually read or see the records before he can see it in the dashboard.  This will help to isolate where the breakdown is happening.  But I'm thinking that the user will be able to see the records with his sys admin role.


    Jason Peterson

    Wednesday, February 26, 2014 9:22 AM
  • 1. The user is in the ReportingGroup.

    2. When i try to post a message on the dashboard i'll also get a message that the message cannot be saved. Also reading a message of a user in the same business unit is not possible.


    Best regards, Joost Lauwen

    Wednesday, February 26, 2014 9:47 AM
  • You may want to run a platform trace on the CRM server while reproducing the error to get a better direction on this.  If possible, run the trace during a time when no one else is using the system because it will capture all transactions by users.


    Jason Peterson

    Wednesday, February 26, 2014 11:44 AM
  • I can do a trace because i'm the only user who is testing the CRM environment at this moment.

    How can I start the trace?


    Best regards, Joost Lauwen

    Wednesday, February 26, 2014 12:16 PM
  • Hi Joost,

    Have a look here to find out how to turn on the tracing http://support.microsoft.com/kb/907490/en-gb

    Wednesday, February 26, 2014 12:26 PM
  • I've just made a trace. But I cannot find anything is this file.

    There is a lot of text, but i only can find the message i've tried to post in the dashboard.


    Best regards, Joost Lauwen

    Wednesday, February 26, 2014 1:04 PM
  • Hi Joost,

    You need to create a scenario where a user/you is/are getting the insufficient permission error and is/are unable to make a post in the dashboard. After you have replicated this error scenario, you can try looking into the trace file to check if you got any exceptions/errors.

    Wednesday, February 26, 2014 3:50 PM
  • Hello,

    I've enabled the trace en reproduced the error.

    When looking in the trace-log I see a lot of text but I cannot see any error. Is there a possibility to upload the log-file?


    Best regards, Joost Lauwen

    Thursday, February 27, 2014 9:07 AM
  • Hi Joost,

    Yes you can paste the log file contents in this site http://justpaste.it/ and provide the link.

    Thursday, February 27, 2014 9:27 AM
  • Hi,

    You can find the file via this link: http://www.spike.nl/download/CRMWeb-20140227-2.log

    If you search for "spike message" you'll find the post i've tried the add in the dashboard of user Guillaume


    Best regards, Joost Lauwen

    Thursday, February 27, 2014 9:40 AM
  • Hi Joost,

    I went through your log file and noticed a couple of exceptions multiple times and these are the reasons:

    Principal user (Id=d9e67f57-4e92-e311-9b15-005056c00008, type=8) is missing prvReadTraceLog privilege (Id=6ea323ab-2e1e-414e-88f5-1f975b3069fd)
    Principal user (Id=d9e67f57-4e92-e311-9b15-005056c00008, type=8) is missing prvReadActivity privilege (Id=650c14fe-3521-45fe-a000-84138688e45d)
    Principal user (Id=d9e67f57-4e92-e311-9b15-005056c00008, type=8) is missing prvCreatePost privilege (Id=8d518c07-bd0d-4274-ba75-809a7b24b37e)
    Principal user (Id=d9e67f57-4e92-e311-9b15-005056c00008, type=8) is missing prvReadmsdyn_wallsavedquery privilege (Id=347797a1-c93d-4fee-a4b2-37e95823931c)
    Principal user (Id=d9e67f57-4e92-e311-9b15-005056c00008, type=8) is missing prvReadPostFollow privilege (Id=2208583f-626b-11e0-834f-1cc1de634cfe)
    Principal user (Id=d9e67f57-4e92-e311-9b15-005056c00008, type=8) is missing prvReadOpportunity privilege (Id=f7767f74-628d-48b3-a79f-9c6e24fedb69)
    Principal user (Id=d9e67f57-4e92-e311-9b15-005056c00008, type=8) is missing prvReadLead privilege (Id=a8ecac53-09e8-4a13-b598-8d8c87bc3d33)

    I believe the Principal user Id is the one of the user you're testing with? And the missing privileges explain why you're not able to make a post or see charts.


    Thursday, February 27, 2014 12:30 PM
  • Hi,

    I've checked it on my SQL Server and the ID is corresponding with the user which is getting the error.

    I found some solutions on the internet, but i've already tried the check/uncheck the roles and this doesn't work.

    Is it something that i can change in the database?


    Best regards, Joost Lauwen

    Thursday, February 27, 2014 1:18 PM