How to fix {"error":{"code":"0x80042f09","message":"ThrowCrmSecurityException:

Question

I have a global admin role and am getting {"error":{"code":"0x80042f09","message":"ThrowCrmSecurityException: The user with id 003c6951-36aa-f111-aaac-000d3a89ec9b has not been assigned any roles. They need a role with the prvReadmsdyn_FileUpload privilege. When importing Excel data to an existing Dataverse table

Answer 1

Add yourself to the System Administrator security role in the affected Dataverse environment; the Microsoft Entra Global Administrator role alone does not grant the Dataverse privilege required by the Excel import.

Self-elevate in the affected environment

1. Sign in to the Power Platform admin center.
2. Select Manage → Environments.
3. Open the environment containing the destination Dataverse table.
4. On the command bar, select Membership.
5. In System Administrators, select Add me.
6. Return to Power Apps, refresh the session or sign out and back in, and retry the Excel import.

Microsoft no longer automatically assigns Dataverse System Administrator to Global Administrators. Global, Power Platform, and Dynamics 365 administrators can use Membership → Add me to elevate themselves in a specific environment.^1^

The expected result is that your user now has a Dataverse role containing prvReadmsdyn_FileUpload, allowing the import process to read the File Upload (msdyn_FileUpload) table. This is a Dataverse table used for file-upload records.^2^

Why Global Administrator was insufficient

Microsoft Entra tenant roles and Dataverse security roles operate at different scopes:

• Global Administrator manages tenant-level settings.
• Dataverse security roles control tables and data inside each individual environment.
• Tenant administrators do not automatically receive Dataverse data access and need the environment’s System Administrator role.^3^

If another user is performing the import

Assign that user an appropriate Dataverse role rather than giving them Global Administrator:

1. Power Platform admin center → Manage → Environments.
2. Select the environment → Settings.
3. Select Users + permissions → Users.
4. Select the importing user → Manage security roles.
5. Assign an approved role containing the required table and import privileges, then select Save.

Every Dataverse user must have at least one security role. Assigning roles requires System Administrator or equivalent Dataverse privileges; security-role permissions are cumulative when multiple roles are assigned.^4^

For least privilege, create or modify a custom role and use the security-role editor’s search to locate the File Upload table or privilege. Grant Read at the scope required by your organization, along with the permissions needed for the destination table and import operation. Dataverse roles separately define table privileges such as Read, Create, and Write and their access levels.^5^

If the user still cannot access the environment after receiving a role, check whether the environment has an associated Microsoft Entra security group and whether the user has an eligible Power Platform or Dynamics 365 license. Licensed users must belong to the associated environment group and must still receive a Dataverse security role before accessing its data.^6^

---

References

1. Manage admin roles with Microsoft Entra Privileged Identity Management
2. File Upload (msdyn_FileUpload) table/entity reference (Microsoft Dataverse)
3. Role-based security roles for Dataverse
4. Assign a security role to a user
5. Security roles and privileges for Dataverse
6. Control user access to environments with security groups and licenses