• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1535
  • Last Modified:

CRM 2011 on premise personal dashboard

Hi!
We have a CRM2011 on premise, where users can not create their own dashbord. (system admin can). If I try, I just get a permission denied.

From the trace log I can find this:

Error Number: 0x80040220
Error Message: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)

Error Details: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)

Source File: Not available
Line Number: Not available
Request URL: http://FQDN:5555/Organisation_name/tools/dashboardEditor/dashboardEditor.aspx?dashboardType=1031&layoutId=4&pagemode=iframe&sitemappath=Workplace%7cMyWork%7cnav_dashboards

Stack Trace Info: [CrmException: Principal user (Id=9b3b5924-c282-e011-ae37-005056a20c03, type=8) is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)]
   at Microsoft.Crm.Application.Platform.ServiceCommands


If I look at the Core records of the security group the users are members of, they have permissions to both:

User Chart
User Dashboard

The user I'm testing with is like said in the log: Id=9b3b5924-c282-e011-ae37-005056a20c03

Is there any place else this might be missing?!:
is missing prvReadPublisher privilege (Id=8cdebade-6187-440d-b041-5b3f3d84db53)
0
snusgubben
Asked:
snusgubben
  • 7
  • 6
1 Solution
 
Feridun KadirPrincipal ConsultantCommented:
Are the users members of custome security roles? I wonder what would happen if you made a users a member of one of the out-of-the-box security roles.
0
 
Feridun KadirPrincipal ConsultantCommented:
I meant to add that if you are using custom security roles and upgraded from version 4, this article may be worth reviewing:
http://support.microsoft.com/kb/953962

0
 
snusgubbenAuthor Commented:
Yes it is a custom made security role. I will test to move a user to a pre-defined group tomorrow.

It has not been upgraded from a previous CRM version.

I'll keep you posted
0
Transaction-level recovery for Oracle database

Veeam Explore for Oracle delivers low RTOs and RPOs with agentless transaction log backup and transaction-level recovery of Oracle databases. You can restore the database to a precise point in time, even to a specific transaction.

 
snusgubbenAuthor Commented:
I moved a user from the custom role, and added him to a pre-defined role. Same issue.
0
 
Feridun KadirPrincipal ConsultantCommented:
I'm sorry but I don't have any other suggestions.
0
 
Chinmay PatelEnterprise ArchitectCommented:
Hi snusgubben,

I cant promise anything but is it possible for you to share some of the error logs with me, I just want to have a look.

Regards,
Chinmay.
0
 
snusgubbenAuthor Commented:
Hi to both of you.

I appreciate your time, but it looks like I found a temporary solution.

If I go to the Customize tab of the spesific security role, and gave the role read privilege for "Publish". I clicked it once so it got BU access.

Then a new error appeared in the trace log:

Stack
Trace Info: [CrmException: businessunit With Id = 21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9 Does Not Exist]
   at Microsoft.Crm.Application.Platform.ServiceCommands.PlatformCommand.XrmExecuteInternal()


If I gave the role read privilege for Publish to Organization (full), then users were able to create dashboards.

I searched the entire CRM database for that GUID, it was found in these tables:

[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[AsyncOperationBase].[DependencyToken] MSCRM_BULKDELETE_21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9
[dbo].[OrganizationBase].[PrivReportingGroupName] DOMAIN\PrivReportingGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}
[dbo].[OrganizationBase].[ReportingGroupName] DOMAIN\ReportingGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}
[dbo].[OrganizationBase].[SqlAccessGroupName] DOMAIN\SQLAccessGroup {21ca4f7f-8c8c-4dbb-ac5d-09cbf7e994a9}


Notice that the Groups that are created during installation has this GUID descending.

We have not imported any CRM3/4 organizations into this installation.



0
 
Feridun KadirPrincipal ConsultantCommented:
I'm guessing you meant the Publisher entity on the Customization tab?

I tested this for a user who has the CEO-Business Manager role (the permissions for Publisher are set to None to all privileges in that role) and that user was able to create new dashboards.  

I wonder if something has happened in your CRM system. Have you deleted any business units?  Update Rollup 4 http://support.microsoft.com/kb/2556167 mentions the "businessunit with id ... does not exist" error but I can't tell if it applies to your situation. It is probably a good idea to install UR 4 anyway.
0
 
snusgubbenAuthor Commented:
Yes, I meant the Publisher entity :)

Like you say, normally (and default) should this entity be set to None. I have also verified this on another installation.

I have not deleted any BUs, so this is just weird.

The "problem" installation has UR2, so I can try to install UR4.

Just an additional question. If I install UR4 and a client is in UR2, will he be able to connect or should you update the clients in advanced?
0
 
Feridun KadirPrincipal ConsultantCommented:
Generally it is recommended that the server and clients are in step. However, in practice it doesn't matter. I would do the server first and the clients soon after.
0
 
snusgubbenAuthor Commented:
We updates the CRM client with WSUS, so if a client is on a lower UR than the server he still can connect?

Wasn't this an issue with CRM4 that the client should be equal or have a higher UR than the server?
0
 
Feridun KadirPrincipal ConsultantCommented:
I'm sure that clients with a lower UR can still connect. I don't recall this being an issue with CRM 4. UR7 in CRM 4 was an unusual one in that it was required as a new baselilne for the CRM client.

If you have clients that are working offline, I guess it would be prudent to get them to the same UR as the server.
0
 
snusgubbenAuthor Commented:
I've not had time to install UR4. I guess I'll do it next week. I'll report back if UR4 fixed the issue since it mentioned the problem with the unknown GUID.
0
 
snusgubbenAuthor Commented:
Sorry for the late response. Looks like the UR4 fixed the issue.

Thanks
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

  • 7
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now