Quantcast
Channel: Microsoft Dynamics CRM Forum - Recent Threads
Viewing all articles
Browse latest Browse all 55831

CRM security role assign privilege level higher then read privilege level.

$
0
0

I'm implementing very simple scenario, that 

Users should be able to view cases (incident) of their own business unit only but they should be able to assign cases to other business units teams.

Now I have created the following structure to achieve that.

Parent Business Unit A 

Business Unit B (child of BU A)
(User 1, in business unit B)
User 1 has read privilege (business unit level aka local) and assign privilege (organization level aka global)

Business Unit C (child of BU A)
(User 2, in business unit C)
User 2 has read privilege (business unit level aka local) and assign privilege (organization level aka global)

User 2 is member of default team (BU-C Team for future reference) of business unit C.

When user 1 from BU-B assigns case to BU-C Team, CRM throws access denied exception. after reading the exception log, it says that user 1 of BU-B do not have the read privilege to incident record.

(My under standing is that when we assign case from one business unit to another, CRM changes the owning business unit of the incident record to BU-C while assigning case to BU-C Team, as soon as the owning BU changes, User 1 do not have the read priv on the case which he\she is assigning to another BU team, so is the access denied exception is thrown and whole process is roll backed as CRM will be managing every thing in single transacitonal context. so user 1 is unable to assign case to BU-C Team).

Is my understanding of the issue is right? and How can we can solve above question in CRM 2011 ?


Viewing all articles
Browse latest Browse all 55831

Trending Articles