Some privileges are missing from a security role that you create from scratch in Microsoft Dynamics CRM 4.0 KB957976

 

Security and CRM. Although many people complain that MS has not given adequate documentation about CRM, I would have to say that that statement falls even shorter when it comes to security. Many of us have known that there are hidden security items within CRM. But look here, MS has finally given us some documentation on the hidden world of CRM security. Hey, its a start at least.

 

http://support.microsoft.com/kb/957976

 

Role	Hidden privilege	Description
Scheduler	prvAppendQueue	Append Privilege on Queue
Sales Manager and Marketing Manager	prvReparentTeam	Change Team's Business Unit
Support User	prvReadSdkMessageProcessingStepSecureConfig	Read SDK Message Processing Step
Vice President of Marketing, Vice President of Sales, and CSR Manager	prvAppendQueue	Append Privilege on Queue
Vice President of Marketing, Vice President of Sales, and CSR Manager	prvReparentTeam	Change Team's Business Unit
CEO-Business Manager	prvAppendQueue	Append Privilege on Queue
CEO-Business Manager	prvAppendBusinessUnit	Append Privilege on Business Unit
CEO-Business Manager	prvReparentTeam	Change Team's Business Unit
System Customizer	prvAppendAttributeMap	Append Privilege on Attribute Map
System Customizer	prvAppendQueue	Append Privilege on Queue
System Customizer	prvAppendToAttributeMap	Append Privilege on Attribute Map
System Customizer	prvAppendToEntityMap	Append to Privilege on Entity Map
System Customizer	prvCreateApplicationFile	Required for users who are running setup or upgrade
System Customizer	prvCreateAttributeMap	Create Privilege on Attribute Map
System Customizer	prvCreateCustomization	Privilege needed to create new customizations and Display Strings
System Customizer	prvCreateEntityMap	Create Entity Map
System Customizer	prvCreatePluginAssembly	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvCreateSdkMessageProcessingStep	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvCreateSdkMessageProcessingStepImage	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvCreateSdkMessageProcessingStepSecureConfig	Needed when Registering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteApplicationFile	Required for users who are running setup or upgrade
System Customizer	prvDeleteAttributeMap	Delete Attribute Map
System Customizer	prvDeleteCustomization	Delete Customizations
System Customizer	prvDeleteEntityMap	Delete Entity Maps
System Customizer	prvDeletePluginAssembly	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteSdkMessageProcessingStep	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteSdkMessageProcessingStepImage	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvDeleteSdkMessageProcessingStepSecureConfig	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Customizer	prvReadSdkMessageProcessingStepSecureConfig	Read SDK Message Processing Step
System Customizer	prvWriteApplicationFile	Required for users who are running setup or upgrade
System Customizer	prvWriteAttributeMap	Write Attribute Map
System Customizer	prvWriteEntityMap	Write Entity Map
System Customizer	prvWritePluginAssembly	Needed for registering plugins (Not applicable for CRM Online)
System Customizer	prvWriteSdkMessageProcessingStep	Needed for registering plugins (Not applicable for CRM Online)
System Customizer	prvWriteSdkMessageProcessingStepImage	Needed for registering plugins (Not applicable for CRM Online)
System Customizer	prvWriteSdkMessageProcessingStepSecureConfig	Needed for registering plugins (Not applicable for CRM Online)
System Administrator	prvAppendAsyncOperation	Append Privilege on Asynchronous Operation
System Administrator	prvAppendAttributeMap	Append Privilege on Attribute Map
System Administrator	prvAppendBusinessUnit	Append Privilege on Business Unit
System Administrator	prvAppendQueue	Append Privilege on Queue
System Administrator	prvAppendToAttributeMap	Append Privilege on Attribute Map
System Administrator	prvAppendToEntityMap	Append to Privilege on Entity Map
System Administrator	prvAppendToOrganization	AppendTo Privilege on Organization
System Administrator	prvBulkDelete	Privilege needed to run Bulk Delete jobs
System Administrator	prvCreateApplicationFile	Required for users who are running setup or upgrade
System Administrator	prvCreateAsyncOperation	Create Privilege on Asynchronous Operation
System Administrator	prvCreateAttributeMap	Create Privilege on Attribute Map
System Administrator	prvCreateCustomization	Privilege needed to create new customizations and Display Strings
System Administrator	prvCreateEntityMap	Create Entity Map
System Administrator	prvCreatePluginAssembly	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreatePluginType	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreateSdkMessageProcessingStep	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreateSdkMessageProcessingStepImage	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvCreateSdkMessageProcessingStepSecureConfig	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteApplicationFile	Required for users who are running setup or upgrade
System Administrator	prvDeleteAttributeMap	Delete Attribute Map
System Administrator	prvDeleteCustomization	Delete Customizations
System Administrator	prvDeleteEntityMap	Delete Entity Maps
System Administrator	prvDeletePluginAssembly	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeletePluginType	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteSdkMessageProcessingStep	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteSdkMessageProcessingStepImage	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvDeleteSdkMessageProcessingStepSecureConfig	Needed when Unregistering Plugins (Not applicable for CRM Online)
System Administrator	prvOverrideCreatedOnCreatedBy	Data Migration privilege that enables a data migration user to preserve created by values on records imported during migration.
System Administrator	prvReadSdkMessageProcessingStepSecureConfig	Read SDK Message Processing Step
System Administrator	prvReparentTeam	Reparent Team - Change Team's Business Unit
System Administrator	prvWriteApplicationFile	Required for users who are running setup or upgrade
System Administrator	prvWriteAttributeMap	Write Attribute Map
System Administrator	prvWriteEntityMap	Write Entity Map
System Administrator	prvWritePluginAssembly	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWritePluginType	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWriteSdkMessageProcessingStep	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWriteSdkMessageProcessingStepImage	Needed when Registering Plugins (Not applicable for CRM Online)
System Administrator	prvWriteSdkMessageProcessingStepSecureConfig	Needed when Registering Plugins (Not applicable for CRM Online)