Link to home
Start Free TrialLog in
Avatar of snusgubben
snusgubbenFlag for Norway

asked on

CRM 2011 on premise personal dashboard

Hi!
We have a CRM2011 on premise, where users can not create their own dashbord. (system admin can). If I try, I just get a permission denied.

From the trace log I can find this:

Error Number: 0x80040220
Error Message: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)

Error Details: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)

Source File: Not available
Line Number: Not available
Request URL: http://FQDN:5555/Organisation_name/tools/dashboardEditor/dashboardEditor.aspx?dashboardType=1031&layoutId=4&pagemode=iframe&sitemappath=Workplace%7cMyWork%7cnav_dashboards

Stack Trace Info: [CrmException: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)]
   at Microsoft.Crm.Application.Platform.ServiceCommands


If I look at the Core records of the security group the users are members of, they have permissions to both:

User Chart
User Dashboard

The user I'm testing with is like said in the log: Id=9b3b5924-c282-e011-ae37-005056a20c03

Is there any place else this might be missing?!:
is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)
Avatar of Feridun Kadir
Feridun Kadir
Flag of United Kingdom of Great Britain and Northern Ireland image

Are the users members of custome security roles? I wonder what would happen if you made a users a member of one of the out-of-the-box security roles.
I meant to add that if you are using custom security roles and upgraded from version 4, this article may be worth reviewing:
http://support.microsoft.com/kb/953962

Avatar of snusgubben

ASKER

Yes it is a custom made security role. I will test to move a user to a pre-defined group tomorrow.

It has not been upgraded from a previous CRM version.

I'll keep you posted
I moved a user from the custom role, and added him to a pre-defined role. Same issue.
I'm sorry but I don't have any other suggestions.
Hi snusgubben,

I cant promise anything but is it possible for you to share some of the error logs with me, I just want to have a look.

Regards,
Chinmay.
Hi to both of you.

I appreciate your time, but it looks like I found a temporary solution.

If I go to the Customize tab of the spesific security role, and gave the role read privilege for "Publish". I clicked it once so it got BU access.

Then a new error appeared in the trace log:

Stack
Trace Info: [CrmException: businessunit With Id = 21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9 Does Not Exist]
   at Microsoft.Crm.Application.Platform.ServiceCommands.PlatformCommand.XrmExecuteInternal()


If I gave the role read privilege for Publish to Organization (full), then users were able to create dashboards.

I searched the entire CRM database for that GUID, it was found in these tables:

[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[OrganizationBase].[PrivReportingGroupName] DOMAIN\PrivReportingGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}
[dbo].[OrganizationBase].[ReportingGroupName] DOMAIN\ReportingGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}
[dbo].[OrganizationBase].[SqlAccessGroupName] DOMAIN\SQLAccessGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}


Notice that the Groups that are created during installation has this GUID descending.

We have not imported any CRM3/4 organizations into this installation.



ASKER CERTIFIED SOLUTION
Avatar of Feridun Kadir
Feridun Kadir
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Yes, I meant the Publisher entity :)

Like you say, normally (and default) should this entity be set to None. I have also verified this on another installation.

I have not deleted any BUs, so this is just weird.

The "problem" installation has UR2, so I can try to install UR4.

Just an additional question. If I install UR4 and a client is in UR2, will he be able to connect or should you update the clients in advanced?
Generally it is recommended that the server and clients are in step. However, in practice it doesn't matter. I would do the server first and the clients soon after.
We updates the CRM client with WSUS, so if a client is on a lower UR than the server he still can connect?

Wasn't this an issue with CRM4 that the client should be equal or have a higher UR than the server?
I'm sure that clients with a lower UR can still connect. I don't recall this being an issue with CRM 4. UR7 in CRM 4 was an unusual one in that it was required as a new baselilne for the CRM client.

If you have clients that are working offline, I guess it would be prudent to get them to the same UR as the server.
I've not had time to install UR4. I guess I'll do it next week. I'll report back if UR4 fixed the issue since it mentioned the problem with the unknown GUID.
Sorry for the late response. Looks like the UR4 fixed the issue.

Thanks