CRM 2011 on premise personal dashboard

Hi!
We have a CRM2011 on premise, where users can not create their own dashbord. (system admin can). If I try, I just get a permission denied.

From the trace log I can find this:

Error Number: 0x80040220
Error Message: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)

Error Details: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)

Source File: Not available
Line Number: Not available
Request URL: http://FQDN:5555/Organisation_name/tools/dashboardEditor/dashboardEditor.aspx?dashboardType=1031&layoutId=4&pagemode=iframe&sitemappath=Workplace%7cMyWork%7cnav_dashboards

Stack Trace Info: [CrmException: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)]
   at Microsoft.Crm.Application.Platform.ServiceCommands


If I look at the Core records of the security group the users are members of, they have permissions to both:

User Chart
User Dashboard

The user I'm testing with is like said in the log: Id=9b3b5924-c282-e011-ae37-005056a20c03

Is there any place else this might be missing?!:
is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)
LVL 21
snusgubbenAsked:
Who is Participating?
 
Feridun KadirConnect With a Mentor Principal ConsultantCommented:
I'm guessing you meant the Publisher entity on the Customization tab?

I tested this for a user who has the CEO-Business Manager role (the permissions for Publisher are set to None to all privileges in that role) and that user was able to create new dashboards.  

I wonder if something has happened in your CRM system. Have you deleted any business units?  Update Rollup 4 http://support.microsoft.com/kb/2556167 mentions the "businessunit with id ... does not exist" error but I can't tell if it applies to your situation. It is probably a good idea to install UR 4 anyway.
0
 
Feridun KadirPrincipal ConsultantCommented:
Are the users members of custome security roles? I wonder what would happen if you made a users a member of one of the out-of-the-box security roles.
0
 
Feridun KadirPrincipal ConsultantCommented:
I meant to add that if you are using custom security roles and upgraded from version 4, this article may be worth reviewing:
http://support.microsoft.com/kb/953962

0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

 
snusgubbenAuthor Commented:
Yes it is a custom made security role. I will test to move a user to a pre-defined group tomorrow.

It has not been upgraded from a previous CRM version.

I'll keep you posted
0
 
snusgubbenAuthor Commented:
I moved a user from the custom role, and added him to a pre-defined role. Same issue.
0
 
Feridun KadirPrincipal ConsultantCommented:
I'm sorry but I don't have any other suggestions.
0
 
Chinmay PatelEnterprise ArchitectCommented:
Hi snusgubben,

I cant promise anything but is it possible for you to share some of the error logs with me, I just want to have a look.

Regards,
Chinmay.
0
 
snusgubbenAuthor Commented:
Hi to both of you.

I appreciate your time, but it looks like I found a temporary solution.

If I go to the Customize tab of the spesific security role, and gave the role read privilege for "Publish". I clicked it once so it got BU access.

Then a new error appeared in the trace log:

Stack
Trace Info: [CrmException: businessunit With Id = 21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9 Does Not Exist]
   at Microsoft.Crm.Application.Platform.ServiceCommands.PlatformCommand.XrmExecuteInternal()


If I gave the role read privilege for Publish to Organization (full), then users were able to create dashboards.

I searched the entire CRM database for that GUID, it was found in these tables:

[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[OrganizationBase].[PrivReportingGroupName] DOMAIN\PrivReportingGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}
[dbo].[OrganizationBase].[ReportingGroupName] DOMAIN\ReportingGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}
[dbo].[OrganizationBase].[SqlAccessGroupName] DOMAIN\SQLAccessGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}


Notice that the Groups that are created during installation has this GUID descending.

We have not imported any CRM3/4 organizations into this installation.



0
 
snusgubbenAuthor Commented:
Yes, I meant the Publisher entity :)

Like you say, normally (and default) should this entity be set to None. I have also verified this on another installation.

I have not deleted any BUs, so this is just weird.

The "problem" installation has UR2, so I can try to install UR4.

Just an additional question. If I install UR4 and a client is in UR2, will he be able to connect or should you update the clients in advanced?
0
 
Feridun KadirPrincipal ConsultantCommented:
Generally it is recommended that the server and clients are in step. However, in practice it doesn't matter. I would do the server first and the clients soon after.
0
 
snusgubbenAuthor Commented:
We updates the CRM client with WSUS, so if a client is on a lower UR than the server he still can connect?

Wasn't this an issue with CRM4 that the client should be equal or have a higher UR than the server?
0
 
Feridun KadirPrincipal ConsultantCommented:
I'm sure that clients with a lower UR can still connect. I don't recall this being an issue with CRM 4. UR7 in CRM 4 was an unusual one in that it was required as a new baselilne for the CRM client.

If you have clients that are working offline, I guess it would be prudent to get them to the same UR as the server.
0
 
snusgubbenAuthor Commented:
I've not had time to install UR4. I guess I'll do it next week. I'll report back if UR4 fixed the issue since it mentioned the problem with the unknown GUID.
0
 
snusgubbenAuthor Commented:
Sorry for the late response. Looks like the UR4 fixed the issue.

Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.