Dynamics CRM Tools

Again, this tool is an application for Robert Boyer, my suggestion box for XrmToolBox tools currently So, the tool allows you to select multiple roles and multiple users or teams to: Add the selected roles to selected users or teams Remove the selected roles to selected users or teams Remove all existing roles from selected users or teams and add them roles selected There is some limitations: You cannot use remove roles action on your own profile Business unit roles, that are not inherited from root business unit can only be added to users/teams in the same business unit I hope this tool will improve your productivity when the need to add or remove multiple roles on multiples users or teams comes. Here is a screenshot of the plugin: As usual, this tool is available as part of the XrmToolBox on CodePlex NB: There is also a bunch of updates for other tools, check them on the download page

I already blogged about that tool in the previous post so you can find all information about the tool here . Just notice that Donna won the contest to find the name of this tool. Congrats, Donna! The tool with the XrmToolBox can be found on CodePlex

As usual, when I develop a tool, it is in response to a need expressed by a customer or colleague. The need, this time, was to be able to identify which security roles allow users to perform a specific action. In more technical terms, how is it possible to retrieve security roles that implement a specific set of privileges. Of, course, SQL queries can help. But when you are not a technical guy, you can’t use SQL. This is why I developed this new plugin, which is named… I don’t know! So, just read the following to see how this plugin works and help me to find its name before I release it publicly. How it works The plugin simply retrieves all available privileges and all security roles. The user can create a set of privileges with the privilege depth included (none, user, division, division and sub division and organization, or any depth). Then, he can display the list of security roles that match this privileges selection. Sceenshot Help me Please answer to this post and help me ...

Two weeks ago, one of my customer ask for some new entities in its CRM application. This was too easy… Well, my customer has also plenty of security roles and I had to update each of them regarding this new entity… boring! So, you know what? I wrote a tool to update multiple roles in a single operation: The role updater. How it works: Just click on “Load Roles and privileges” to display all master roles and list of all privileges. Check the roles that need to be updated Check the privileges to add or remove: If privilege addition, select the access level associated with the checked privileges. Then click on button “Add Privilege(s)” If privilege removal, just click on button “Remove Privilege(s)” As usual, the tool is available on codeplex Do not hesitate to comment, review and track issue on codeplex

Do you remember the difficulty it was to identify a missing privilege when reading security exception logs in Microsoft Dynamics CRM 4.0? We had to query the database which was quite annoying… The messages were the same kind as one of the below messages: When you try to perform an action that is affected by another user security limitation SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 1ef9f412-6601-dd11-8655-0019b9dfe618, OwningUser: 98bbc999-96a2-de11-aeaf-0019b9dfe227 and CallingUser: 037c1c90-96a2-de11-aeaf-0019b9dfe227 When you try to perform an action when you don’t have the privilege to actually do it CrmSecurityException: SecLib::CrmCheckPrivilege failed. Returned hr = -2147220960 on UserId: 60826d61-2be1-db11-821c-000423b79351 and PrivilegeId: 588725dd-c878-41c5-a4c3-5efc93cd3ffd Microsoft Dynamics CRM 2011 improve drastically the error message to avoid a fastidious search in database: When you try to perform an action that is affected by anothe...

My colleague Didier, and I, have discovered a strange behavior with security roles and queues. When you look at the SDK for minimal set of privileges required to create a queue, you can see the following list: prvAppendQueue prvAppendToUser prvCreateQueue There is just one problem… In the security role interface, there is no Append privilege for Queue, so you can’t set it to enable Queue creation. This problem makes the Queue creation form difficult to use as the lookup controls are disabled but mandatory... You also need to know that this problem occurs only with security role you created from scratch. To resolve this problem, there are two solutions: Copy the administrator role (which contains the Append privilege on Queue entity, even if it’s not visible) and remove inappropriate privileges. Export the role, and add the following XML line in the appropriate role node: < privilege name ="prvAppendQueue" depth =" Global " /> Import the role you changed