Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article provides a solution to a permissions error that occurs when you try to test and enable a mailbox in Microsoft Dynamics 365.
Applies to: Microsoft Dynamics 365
Original KB number: 4052824
Symptoms
When you try to test and enable a mailbox in Dynamics 365, the following alert is logged:
Appointments, contacts, and tasks can't be synchronized for the mailbox <Mailbox Name> because the mailbox user doesn't have sufficient permissions on this mailbox.
Email Server Error Code: Crm.80048306.Not enough privilege to access the Microsoft Dynamics 365 object or perform the requested operation.
If you select to view the details, the following extra details are shown:
T:195
ActivityId: <GUID>
>Exception : Unhandled Exception: Microsoft.Crm.CrmSecurityException: SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: <GUID>, OwnerId: <GUID>, OwnerIdType: 8 and CallingUser: <GUID>. ObjectTypeCode: 4120, objectBusinessUnitId: <GUID>, AccessRights: WriteAccess at Microsoft.Crm.BusinessEntities.SecurityLibrary.AccessCheckEx2(ExecutionContext context, SecurityPrincipal principal, SecurityPrincipal ownerPrincipal, Guid objectId, Int32 objectTypeCode, Guid objectBusinessUnitId, AccessRights rights) at Microsoft.Crm.Asynchronous.EmailConnector.ExchangeSyncUtility.HasExchangeSyncIdMappingAccess(Guid userId, Int32 userIdTypeCode, IACTProviderContext orgContext) at Microsoft.Crm.Asynchronous.EmailConnector.ExchangeSyncWorker.PerformPreMailboxSyncChecks() at Microsoft.Crm.Asynchronous.EmailConnector.ExchangeS...
Cause
The Dynamics 365 user associated with the mailbox doesn't have sufficient privileges. This issue often occurs because the user doesn't have a security role assigned or their security role lacks user-level read or write access to the Mailbox entity.
Important
Verify that the owner of the mailbox record matches the user. For example, if the mailbox belongs to Paul Cannon, ensure that the Owner value in the record is also Paul Cannon. If it shows a different user, that user might not have access to Paul Cannon's mailbox.
Resolution
To fix this issue, follow these steps:
Open the mailbox record as a user with the "System Administrator" role in Dynamics 365.
Tip
The alert includes a link to the mailbox record.
Verify that the Owner field in the mailbox form has the user's name. If another name is listed, change it to the user's name.
Select the link in the Owner field to open the user record for the owning user.
Select Manage Roles to see which security role(s) are assigned to the user.
Navigate to Settings, select Security, and then select Security roles.
Open the roles found in step 4. See PrivilegeDenied error occurs when using server-side synchronization for a list of required privileges, and then verify that the user's security role contains these privileges.
After verifying that the user is the owner of the mailbox record and that their security role contains the required privileges, select the Test & Enable Mailbox button in the mailbox record again. If the test doesn't result in Success, review the message shown in the Alerts section.