A privilege error occurs when attempting to use Microsoft Dynamics 365 App for Outlook

This article provides a resolution for the issue that you may receive the You don't have required privilege (prvReadOrganization) error when trying to use the Microsoft Dynamics 365 App for Outlook.

Applies to:   Microsoft Dynamics 365 Customer Engagement Online
Original KB number:   4563997

Symptoms

When attempting to use the Microsoft Dynamics 365 App for Outlook, you encounter an error referencing a missing privilege such as the following error:

You don't have required privilege (prvReadOrganization), which limits certain functionality. Please contact your administrator to get necessary access.

Cause

This error will appear if the user associated with the mailbox record does not have sufficient privileges to use Microsoft Dynamics 365 App for Outlook.

Resolution

Option 1: Assign Microsoft Dynamics 365 App for Outlook User security role

A standard role exists to provide the privileges required to use Microsoft Dynamics 365 App for Outlook. This role is named Microsoft Dynamics 365 App for Outlook User and can be assigned to users who need to use App for Outlook. For more information on this role, see Provide security role access.

Option 2: Custom Role

If you prefer to customize a role to include the required privileges, refer to the More information section for a list of privileges required to use Microsoft Dynamics 365 App for Outlook.

More information

The following table lists privileges required to use Microsoft Dynamics 365 App for Outlook and the tab in a security role where the privilege can be found. A user with the System Administrator role can locate and modify a security role by navigating to Settings > Security > Security Roles. To view which role(s) are assigned to a specific user, navigate to Settings, select Security, select Users, select the specific User record, and then select Manage Roles.

Privilege name	Entity	Location (tab) within security role
prvReadEmailServerProfile	EmailServerProfile	Business Management
prvReadRole	Security Role	Business Management
prvReadUser	User	Business Management
prvWriteMailbox	Mailbox	Business Management
prvReadMailbox	Mailbox	Business Management
prvReadOrganization	Organization	Business Management
prvSyncToOutlook (exchangesyncidmapping	Sync to Outlook	Business Management --> Privacy-related privileges
prvUseOfficeApps	Use Dynamics 365 App for Outlook	Business Management --> Privacy-related privileges
prvAppendToAccount	Account	Core Records
prvReadAccount	Account	Core Records
prvDeleteActivity	Activity	Core Records
prvAppendActivity	Activity	Core Records
prvWriteActivity	Activity	Core Records
prvCreateActivity	Activity	Core Records
prvReadActivity	Activity	Core Records
prvAppendToActivity	Activity	Core Records
prvShareActivity	Activity	Core Records
prvAppendToContact	Contact	Core Records
prvReadContact	Contact	Core Records
prvCreateContact	Contact	Core Records
prvReadUserQuery	Saved View	Core Records
prvReadAppModule	Model-driven App	Customization
prvReadAttribute	Field	Customization
prvReadEntity	Entity	Customization
prvReadRelationship	Relationship	Customization
prvReadSystemApplicationMetadata	System Application Metadata	Customization
prvReadSystemForm	System Form	Customization
prvReadUserApplicationMetadata	User Application Metadata	Customization
prvReadQuery	View	Customization
prvReadWebResource	Web Resource	Customization
prvSearchAvailability	Search Availability	Service Management --> Miscellaneous Privileges

The following table lists additional privileges that are required to view some of the default views used inside the Microsoft Dynamics 365 App for Outlook forms. Without these privileges, a user may see the following error instead of the expected view (subgrid) of records:

You do not have permission to access these records. Contact your Microsoft Dynamics 365 administrator for help.

Privilege name	Entity	Location (tab) within security role
prvReadIncident	Case	Service
prvReadOpportunity	Opportunity	Core Records
prvReadCompetitor	Competitor	Sales
prvReadConnection	Connection	Core Records