Microsoft Dynamics CRM: Security Role Permissions Explained

(Applies to Riva Cloud and Riva On-Premise for Microsoft Dynamics CRM 2011+.)

Issue

The following error appears in the Riva Service Monitor application and in the crmex-log file:

Error occurred deleting item: User does not hold the necessary privileges on module 'appointment' to perform the operation.

Cause

Riva Cloud and Riva On-Premise use the CRM access control settings of the target users being synchronized to Exchange — not the admin-level user used in the Riva CRM connection. Access control restrictions are based on the permission sets of the Role assigned to the user. The error may occur because most Microsoft Dynamics CRM (Dynamics CRM) Roles, by default, allow users to delete only their own appointments, not appointments owned by other users.

Possible Solution

If you want to allow the user(s) in question to delete appointments owned by other users, assign them a Dynamics CRM role that has that capability.

To gain access to Dynamics CRM Roles:

1. Log in to Dynamics CRM as an admin equivalent user. On the menu, select Settings > Security > Security Roles.

2. On the Administration List, select Security Roles.

   

3. Double-click the security role to open the role management window, and select the Core Records tab.

   

4. In the Key area at the bottom of the tab, understand the implications of each possible selection:

   

   • If None Selected is assigned, the user in that role cannot perform the action indicated in the column title.
   • If User is assigned, the user in that role can perform the action indicated on items that are assigned to the user.
   • If Business Unit is assigned, the user in that role can perform the action indicated on items assigned to users in their own Business Unit.
   • If Parent Child Business Units is assigned, the user in that role can perform the action indicated on items assigned to users in their own and child Business Units.
   • If Organization is assigned, the user in that role can perform the action indicated on any item.

   Example: In Dynamics CRM, a user is not set up to delete an activity assigned to any other user; therefore, when the user deletes, in Outlook, an activity assigned to another user, Riva is unable to synchronize the deletion.