roles 11-02-04

I am confused about setting up security roles.  We have two 
businesses(Business Units) at our workplace.  Let's call them Parent and 
Child.  Users work for either the Parent, Child or both.  I would like the 
Roles within CRM to restrict them to these businesses.  It seems that I can 
only have the user reside in one business unit, not both.  We have a role 
defined called "Parent User" and another called "Child User".  But when I go 
to set a user to have both roles, the role always reflect the business unit 
in which the user resides, not the business unit of the role.
I have been able to successfully set a user to reside in only one Business 
Unit with that role and their data are restricted to that Business Unit.  But 
this does not solve the case where the user needs access to Parent and Child.

Can someone tell me a work around to this situation?
0
Utf
11/2/2004 12:03:03 AM
crm 35858 articles. 1 followers. Follow

3 Replies
367 Views

Similar Articles

[PageSpeed] 9

Dear lee,

You can get to your solution with the normal security possibilities of crm.
When editing or creating a role, you can set several actions (read, assign, 
delete etc) for several entities (contact, account, opportunity etc) on 
several niveaus (none, user, business unit, parent unit and organization). 
The first two (actions and entities) you probably do use correctly, but you 
should take a close look at the niveaus you can set those priviledges to.

I would suggest you to make 2 roles: parent role and child role.
The parent role should have set all the niveaus to parent unit (3 quarter of 
the green circle) and the child to business unit (half circle). After setting 
the roles and assigning them to the correct users, please let them restart 
internet explorer before checking.

Good luck,

Ronald Lemmen
Avanade Netherlands

"lee" wrote:

> I am confused about setting up security roles.  We have two 
> businesses(Business Units) at our workplace.  Let's call them Parent and 
> Child.  Users work for either the Parent, Child or both.  I would like the 
> Roles within CRM to restrict them to these businesses.  It seems that I can 
> only have the user reside in one business unit, not both.  We have a role 
> defined called "Parent User" and another called "Child User".  But when I go 
> to set a user to have both roles, the role always reflect the business unit 
> in which the user resides, not the business unit of the role.
> I have been able to successfully set a user to reside in only one Business 
> Unit with that role and their data are restricted to that Business Unit.  But 
> this does not solve the case where the user needs access to Parent and Child.
> 
> Can someone tell me a work around to this situation?
0
Utf
11/2/2004 9:14:02 AM
Ronald,
Since you were able to assist Lee I was hoping you could also point me in 
the right direction.
We were able to install the CRM and have everything working seemingly well. 
But when I came to changing users access I was not able to.

I used the Deployment Manager to view all of my users and then selected one 
of the users who is set as "CEO-Business Manager" where this individual 
should have been set to have customization role. But when I right click to 
get his property I only see "Change Account" and I can only get the "User" 
object type. I can not delete the user or change his role! 

Do you have any suggestions as how I can change this behavior. I am logged 
into the server as the administrator and I would think I should have the 
priviledge to change, or delete a users roles and permissions at this level.

Would appreciate any assitance you can provide.

-Aria

"Ronald Lemmen" wrote:

> Dear lee,
> 
> You can get to your solution with the normal security possibilities of crm.
> When editing or creating a role, you can set several actions (read, assign, 
> delete etc) for several entities (contact, account, opportunity etc) on 
> several niveaus (none, user, business unit, parent unit and organization). 
> The first two (actions and entities) you probably do use correctly, but you 
> should take a close look at the niveaus you can set those priviledges to.
> 
> I would suggest you to make 2 roles: parent role and child role.
> The parent role should have set all the niveaus to parent unit (3 quarter of 
> the green circle) and the child to business unit (half circle). After setting 
> the roles and assigning them to the correct users, please let them restart 
> internet explorer before checking.
> 
> Good luck,
> 
> Ronald Lemmen
> Avanade Netherlands
> 
> "lee" wrote:
> 
> > I am confused about setting up security roles.  We have two 
> > businesses(Business Units) at our workplace.  Let's call them Parent and 
> > Child.  Users work for either the Parent, Child or both.  I would like the 
> > Roles within CRM to restrict them to these businesses.  It seems that I can 
> > only have the user reside in one business unit, not both.  We have a role 
> > defined called "Parent User" and another called "Child User".  But when I go 
> > to set a user to have both roles, the role always reflect the business unit 
> > in which the user resides, not the business unit of the role.
> > I have been able to successfully set a user to reside in only one Business 
> > Unit with that role and their data are restricted to that Business Unit.  But 
> > this does not solve the case where the user needs access to Parent and Child.
> > 
> > Can someone tell me a work around to this situation?
0
Utf
3/17/2006 8:51:29 PM
Aria,

You can modify user roles through the web application directly.  Go to 
settings -> business unit settings -> users.  Highlight the user you want to 
modify and then go to "More Actions->Manage Roles.

-- 
Jay Grewal
Microsoft Dynamics CRM

This posting is provided "AS IS" with no warranties and confers no rights.
"Aria1844@hotmail.com" <Aria1844hotmailcom@discussions.microsoft.com> wrote 
in message news:731F9278-5EC4-487C-8DD9-E44E057FB429@microsoft.com...
> Ronald,
> Since you were able to assist Lee I was hoping you could also point me in
> the right direction.
> We were able to install the CRM and have everything working seemingly 
> well.
> But when I came to changing users access I was not able to.
>
> I used the Deployment Manager to view all of my users and then selected 
> one
> of the users who is set as "CEO-Business Manager" where this individual
> should have been set to have customization role. But when I right click to
> get his property I only see "Change Account" and I can only get the "User"
> object type. I can not delete the user or change his role!
>
> Do you have any suggestions as how I can change this behavior. I am logged
> into the server as the administrator and I would think I should have the
> priviledge to change, or delete a users roles and permissions at this 
> level.
>
> Would appreciate any assitance you can provide.
>
> -Aria
>
> "Ronald Lemmen" wrote:
>
>> Dear lee,
>>
>> You can get to your solution with the normal security possibilities of 
>> crm.
>> When editing or creating a role, you can set several actions (read, 
>> assign,
>> delete etc) for several entities (contact, account, opportunity etc) on
>> several niveaus (none, user, business unit, parent unit and 
>> organization).
>> The first two (actions and entities) you probably do use correctly, but 
>> you
>> should take a close look at the niveaus you can set those priviledges to.
>>
>> I would suggest you to make 2 roles: parent role and child role.
>> The parent role should have set all the niveaus to parent unit (3 quarter 
>> of
>> the green circle) and the child to business unit (half circle). After 
>> setting
>> the roles and assigning them to the correct users, please let them 
>> restart
>> internet explorer before checking.
>>
>> Good luck,
>>
>> Ronald Lemmen
>> Avanade Netherlands
>>
>> "lee" wrote:
>>
>> > I am confused about setting up security roles.  We have two
>> > businesses(Business Units) at our workplace.  Let's call them Parent 
>> > and
>> > Child.  Users work for either the Parent, Child or both.  I would like 
>> > the
>> > Roles within CRM to restrict them to these businesses.  It seems that I 
>> > can
>> > only have the user reside in one business unit, not both.  We have a 
>> > role
>> > defined called "Parent User" and another called "Child User".  But when 
>> > I go
>> > to set a user to have both roles, the role always reflect the business 
>> > unit
>> > in which the user resides, not the business unit of the role.
>> > I have been able to successfully set a user to reside in only one 
>> > Business
>> > Unit with that role and their data are restricted to that Business 
>> > Unit.  But
>> > this does not solve the case where the user needs access to Parent and 
>> > Child.
>> >
>> > Can someone tell me a work around to this situation? 


0
Jay
3/21/2006 9:56:05 PM
Reply:

Similar Artilces:

access 11-29-07
Hi.Can you please teach me how to lock my design view and add menu commands in add-ins tab.Your post will be very useful. ...

Vista Home WMP 11 Doesn't Play WMV However Win Movie Maker Does..W
When trying to play .wmv files on WMP 11 in Vista Home Baseic I get the notorious "Windows Media Player cannot access the file. The file might be in use, you might not have access to the computer where the file is stored, or your proxy settings might not be correct." However I've tried playing the same .wmv files with Win Movie Maker and there is no problem at all. Is there a solution to this? Much Thanks!!! ...

Storage Folder 01-11-10
We have a Windows Media Server where all our email storage folders are stored. However, with Windows Live Email, I don't seem to be able to change the storage folder to the Server as the Ok button grays out as soon as I select that folder on the Server (network folder). Windows Live email seems to be only happy as long as the storage folder is on the computer you are using. Has anyone suggestions how I can change the storage folder to be located on a network folder? Thanks The free Microsoft email programs must have the storage folder on the same drive. Outlook has th...

Microsoft CRM Report Viewer Bug ? 04-15-07
When viewing report in Microsoft CRM Report Viewer, it extracts the filter info from the RDL file. When user saves the default filter it's also stored in the RDL. The filter info is actually the Fetch XML which is build dynamically by the viewer control. I've created a report and in the RDL file specified the Fetch XML with linked entities and attributes for each linked entity. This way when report is executed, the Fetch XML is converted to the SQL statement which is used as report data (when executed). Report viewer displayes the filter correctly BUT when it builds the Fetch ...

Custom Entities 04-13-06
Can I create a lookup field that can associate many custom entity records to a single account (Like many recipients to a single e-mail)? --Dodd ...

Transferring Roles
Hello ... I have two Windows DC's ...both are running Windows 2000 Server (sp4). Server "A" is old and being decommissioned. Server A holds all of the roles (Schema master, PDC emulator, etc,,etc). If I run DCPromo to change the role of the server from DC to a "server", will that transfer the roles to the other server or do I need to transfer the roles before running DCPromo? Thanks in advance. Hi Nick, correct - when you de-promote a DC (Server A) and min 1 else is still available in the domain, all relevant roles will be automatically tra...

Quicken'04 to Money (Trial) did not transfer any transactions or balances
After going thru the install, and conversion of Q'04 to Money, Money re-created all the accounts, and on the confirmation dialogue box it reported(correctly ) the account balances that it would import. However, none of the transactions showed up, and all the account balances are equal to zero. I imported the data file, as well as attempted to bring in the QIF(but shouldn't have had to). Got an error message. Any suggestions? Pierre Since M04 doesn't support conversion of Q04 files, I'm surprised you got anything. "Yippy" <yippy@snippy.net> wrote in mes...

Pivot table help #11
I needed help with a Pivot table. In the attached excel sheet i am trying to use the Creatiion date (coloum X)as one of the filters in the pivot table. Could someone please guide me as to how i can filter with the Creation date as one of the pivot tables. Thanks Sammy ...

Windows XP SP4 02-11-10
Is there an SP4 in the works, or is it the end of the XP road? Saucy wrote: > > Is there an SP4 in the works, or is it the end of the XP road? It's the end of the road. -- C Saucy wrote: > Is there an SP4 in the works, or is it the end of the XP road? No one really knows other than Microsoft. There might be a rollup someday - but I would not put any money on an SP4 and probably wouldn't put money on a rollup. Two OSes have been released with multipple service packs released for one of them already. Windows XP is already in the 'extended' ...

(APPZ) Video2Brain.Autodesk.Inventor.2010.Workshops.fuer.Fortgeschrittene.GERMAN-Substance
=ybegin part=1 line=128 size=22368 name=Video2Brain.Autodesk.Inventor.2010.Workshops.fuer.Fortgeschrittene.GERMAN-Substance.par2 =ypart begin=1 end=22368 zk|\*zu~*******��Z���n��t��������|��[�3"��ͥ}zk|J\XZ*p���n���V�T)��ZS1%�ژ|�t/6�$�C�U����CP.*��^" �^.S�S6**:-****�����\l� ���Xk�������Xs�������X\Z[ZX���������X����Xp���������������Xqo|wkxW}��������X����Z[X���**zk|\*zu~�4******�`j~+��'��,�PVC���|��[� 3"��ͥ}zk|J\XZ*sp}m****V�T)��ZS1%�ژ|���\=@����%ʭ����|�3�\Ͽ���kt�ㅬZqM���X����4�y��j&b�8��] I�=J�u��mg1Cr�����)f'Ӿ *��}�Q�F�\>�&o_<P�֝�\\...

Unable to install 11.3.6 update...
This is really odd. When I try to install the 11.3.6 update for Office Mac (either from auto update or from download on Microsoft website), I get the standard error that I don't have the correct version installed. I have verified from the Read Me file as the error message says that I do have version 11.3.5 installed. I've verified my specs. Here are my specs: PowerBook G4 1.25 Mhz Mac OS 10.4.10 Office 2004 11.3.5 The only thing the Read Me recommends to do is to trash Office and reinstall from the disk and reapply updates. I REALLY don't want to have to do that. Any ideas o...

Media Player 11 Install
I am trying to install Media player 11. In the XP help & Support Centre my version is given as 2004 When I try to install Media Player 11 I get a message to install XP Media Center 2005 Roll up 2, of course when I try to install this I get a message that it is not suitable for my version of XP I have run the Updates in Help & Support. Can anyone help? Hairsuit <Hairsuit@discussions.microsoft.com> wrote: >I am trying to install Media player 11. >In the XP help & Support Centre my version is given as 2004 >When I try to install Media Player 11 I get a message t...

SQL 2005 Replication 01-04-10
In a publisher/subscription db replication scenario, I would like to alter db setting on the db that publishes. What would be the desired procedure for accomplishing this? Thanks in advance ...

Parameter Problem 02-28-08
I have a summary query that is summing the daily% [Sum of Daily%] and summing the hours [Sum of Hours]. When I run the query with these two columns, it runs fine and shows the values. I add a third column which is calculted as Rate%: [Sum of Daily%]/[Sum of Hours]. When I run the query, it is asking for values for [Sum of Daily%] and [Sum of Hours]. I doesn't matter what number (if any) I enter, I can just press return, and they run fine. How can I stop Access from asking for these parameters? Thanks for any suggestions! -Bill Please can you put me out of my misery. I can...

Crystal Reports 11-27-03
Hi guys, I have the 'Please verify if you have enough Crystal licenses' error when viewing report lists. Tried to do what the Implementation Guide suggested by adding the NT Authority\Interactive and NT Authority\Authenticated Users into Local Users group but to no avail. Any idea, guys? Any feedback is very much appreciated. Cheers KC You can find techknowledge on support if you are a partner or customer having paid support. Refer to this, a lot of issues are resolved here. >-----Original Message----- >Hi guys, >I have the 'Please verify if you have enough Crystal l...

hosting CRM 05-03-04
We are looking at feasibility of hosting a client's CRM. Whitepapers say this can be done. We are running Windows 2003 AD consisting of a single forest,single domain, with Exchange 2003 as the messaging system and have CRM and Adventure Works Sample DB and Sales For Outlook Client up and running nicely. Any advice before I start would be appreciated. I understand that there are already a limited number of service providers offering hosted CRM, does anyone here have any experience of usign these? Cheers, Dean "sherry" <anonymous@discussions.microsoft.com> wrote i...

Why do I get this ###### instead of 11:00 p.m. in formatted cell?
One reason could be that the column isn't wide enough. Try widening the column. -- Biff Microsoft Excel MVP Always supply your formula and the values of the input cells -- Kind regards, Niek Otten Microsoft MVP - Excel "new user" <new user@discussions.microsoft.com> wrote in message news:32404C0C-FB66-4D90-A301-42D0322E2CFE@microsoft.com... | On 15 =F1=E5=EF, 19:43, new user <new u...@discussions.microsoft.com> wrote= : > Not to forget: if cell contains fomula that evaluates time value and result turns to be negative, it will be shown as ###### no...

Slow Performance 08-02-07
Hi, i have a very wiered problem, i have CRM installed here, with about 1000 or more users. now we are facing a very slow performance, though i checked everything but no specific error, additionally, some users try to open quotes of their accounts, and they rarely load, but when i assigned them system administrator priv. as a test, it loaded very fast and normally, noting that it is not a permission problem, i checked on permission and all r right can you help with that -- Regards, Marwa Go to www.msdn.com and find the document "Microsoft Dynamics CRM 3.0 Optimizing Performance ...

turning a short date (11/21/07) into a long date (21st Nov 2007)
I've got a form for entering information into my database. The first piece of information entered is the date time group (in the format yymmdd e.g 071101 is the 1st nov 2007). This is the primary key and so is a unique number in the records. the next fields are year, month and day. im trying to get it to work so that these 3 fields automatically fill themselves out based on the information in the date time group field (i.e with the example above, 2007 would automatically go in the year field, nov in the month etc). any help would be much appreciated, thanks a lot =?Utf-8?B?YmVubnk=...

No Longer have Administrative Role (Business Solutions 1.2)
Hello I have accidentally deleted the Administrative Role from my CRM. (Business Solutions 1.2) Every user that now tries to log on get a Licence Error Telling the user The selected user or user trying to log on has not been assigned a security role or license, and does not have sufficient privileges for this action. For more information, contact you system administrator. Is there any way that I can reinstate the Administrative Role or is there some tool that I can use to reinstate the Administrative Role? On Tue, 20 Dec 2005 09:12:13 +1000, "Paul" <paulmNOSPAMmesser@ho...

Comparing Tables 02-22-10
I have looked at the postings for this but don't quite understand. I have an excel doc that is now a table used in DB. There are several fields, Carrier, Client_Name, Appeals_Phone, Fax, Comp_Add2, City, State, Zip I get a revised table every quarter and would like to compare the old and new and see what changes there are. For example Carrier 1234, Client Sesame Street, Appeals_Phone 999-999-9999, Fax 123-456-7890, Comp Ses St, Add2 1234 Big Bird Lane, Yardley, PA, 12346 Now a new list comes in and the address is different 4567 Big Bird Lane. How do I run a query against the 2 ...

v. 11.1.0 issues
After installing the Update to 11.1.0, every Office application has slowed to a crawl. In Entourage, if I'm in the Mail screen and select Address Book or Calendar, I'm locked up for 10 to 15 seconds before the switch is made. I'm running OS X 10.3.5, 512 MB of RAM. Any suggestions? ...

multiple environments 02-07-06
When implementing ERP systems it is always easy to work with multiple environments such as a test, training and live environment. We tried to simulate this with several business units, but apparently test accounts entered or imported into the test Business Unit also also visible in the Live Business Unit. Does anyone have suggestions how to achieve this? -- Tony Rook Independent Concultant The Netherlands I do this with completely separate networks... There is the live network and then the test network which is a completely separate AD network. This allows us to test all aspects of th...

send/receive error #11
I ran into a problem with my Outlook 2002 when recently I was trying to autoarchive some old emails. When the archive was done, I lost the ability to send/receive email. I have checked & double checked my email server settings (both inbound and outbound) but to no avail. When I click the Send/Receive button, nothing happens- I don't even get an error saying that the attempt failed. Please let me know if you have any ideas as to what the problem might be. thanks -a. Hi, please try to set a new profile. >-----Original Message----- >I ran into a problem with my...

Error message 09-22-04
I am still having trouble logging in. I have Changed the CRM security Service to start after the SQL Server. When I try to log in I get an error. I went to the application logs on the server and found the following error log: MSCRM Platform Error Report: ---------------------------------------------------------- ---------------------------------------------- Error: Catastrophic failure Error Message: Catastrophic failure Error Details: Details on this error have not been provided by the platform. Source File: Not available Line Number: Not available Stack Trace Info: at System...