Export (0) Print
Expand All

Privileges by Object

CRM 1.2
banner art

You can assign privileges to a security role. These privileges determine what actions a user with that security role can perform on entities.

Microsoft CRM includes the privileges, listed in the following table, that apply to most entity types.

Privilege Description
Create Create an entity.
Read View entities.
Write Make changes to entities for users.
Delete Remove entities for users.
Append Associate a selected entity to another entity.
Append To To associate an entity to this entity.
Assign Give access to entities to another user.
Share Give access to entities to another user while keeping your own access.
Reparent Assign a different parent to an entity.
Enable/Disable Give or take away privileges.

Privilege Depth

Privilege levels for the same security role in a different business unit can be set at different levels. For example, a security role can have parent-child level access for a sales department, and organization-wide access for an accounting department. Privileges at a lower-level business unit cannot be lower than that of the main or primary business unit. However, the privileges at the lower-level business unit can be higher than that of the main or primary unit. Sometimes, you might need to create a custom role to permit the different privilege levels.

Access Levels

With your privileges set, you can perform actions on records. However, access levels determine on which specific records you can perform those actions.

The following table describes the supported access levels.

Symbol SDK Name Application Name Description
Global Global Organization This global access level lets the user work with all record types within the entire organization, regardless of the business unit hierarchical level to which the entity or user belongs. Users who have Organization access automatically have Parent: Child Business Units, Business Unit, and User access as well.
Deep Deep Parent: Child Business Units This deep access level lets the user work with record types in the user's business unit, and all business units subordinate to the user's business unit. Users with Parent: Child Business Units access automatically have Business Unit and User access as well. For example, if a user has Parent: Child Business Units Read Account privileges, the user can read all accounts in his or her business unit, as well as all accounts in any child business unit of that business unit.
Local Local Business Unit This middle access level lets the user work with record types in the user's business unit. Users who have Business Unit access automatically have User access as well. For example, if a user has Business Unit Read Account privileges, the user can read all accounts in the local business unit.
Basic Basic User This entry access level lets the user work with record types they own, record types that are shared with the user, and record types that are shared with the team of which the user is a member. For example, if a user is assigned the User Read Account privilege, the only accounts that can be read are those that are owned by or shared to the user.
None None None Selected This access level denies the user privileges at any level. A privilege is not added to the security role.

In This Topic

Account Privileges

Activity Privileges

Annotation Privileges

BusinessUnit Privileges

BusinessUnitNewsArticle Privileges

Calendar Privileges

Campaign Privileges

Competitor Privileges

ConstraintBasedGroup Privileges

Contact Privileges

Contract Privileges

ContractTemplate Privileges

CustomerOpportunityRole Privileges

CustomerRelationship Privileges

Equipment Privileges

Incident Privileges

Invoice Privileges

KBArticle Privileges

KBArticleTemplate Privileges

Lead Privileges

License Privileges

List Privileges

Opportunity Privileges

Organization Privileges

PluginType Privileges

Product Privileges

Queue Privileges

Quote Privileges

RelationshipRole Privileges

Resource Privileges

ResourceGroup Privileges

ResourceSpec Privileges

Role Privileges

SalesLiterature Privileges

SalesOrder Privileges

SavedQuery Privileges

Service Privileges

Site Privileges

Subject Privileges

SystemUser Privileges

Team Privileges

Template Privileges

Territory Privileges

UserQuery Privileges

WorkflowProcess Privileges

WorkflowProcessInstance Privileges

System Customization Privileges

Other Privileges


© 2007 Microsoft Corporation. All rights reserved.


Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft