Create or edit a security role

 

Applies To: Dynamics CRM 2013

You can create new security roles to accommodate changes in your business requirements or you can edit the privileges associated with an existing security role.

If you need to back up your security role changes, or export security roles for use in a different implementation of Microsoft Dynamics CRM, you can export them as part of exporting customizations. More information: Export a solution

Create a security role

  1. Make sure that you have the System Administrator or System Customizer security role or equivalent permissions. 

    Check your security role

    • Follow the steps in View your user profile.

    • Don’t have the correct permissions? Contact your system administrator.

  2. Follow the steps for the app you’re using.

    If using the CRM web application

    1. On the nav bar, click or tap Microsoft Dynamics CRM > Settings.

      Settings appears on the nav bar.

    2. Click or tap Settings > Administration > Security Roles.

    If using CRM for Outlook

    1. In the Navigation Pane, expand your organization if necessary, and then click or tap Settings > System > Administration > Security Roles.
  3. On the Actions toolbar, click New.

  4. Set the privileges on each tab.

    To change the access level for a privilege, click the symbol until you see the symbol you want. The possible access levels depend on whether the record type is organization-owned or user-owned.

    Tip

    To cycle through the access levels, you can also click the privilege column heading, or click the record type multiple times.

  5. When you have finished configuring the security role, on the toolbar, click or tap Save and Close.

Edit a security role

Before you edit an existing security role, make sure that you understand the principles of data access. More information:  Control data access

Note

You can’t edit the System Administrator security role. To create a security role similar to the System Administrator security role, copy the System Administrator security role, and make changes to the new role.

  1. Make sure that you have the System Administrator or System Customizer security role or equivalent permissions. 

    Check your security role

    • Follow the steps in View your user profile.

    • Don’t have the correct permissions? Contact your system administrator.

  2. Follow the steps for the app you’re using.

    If using the CRM web application

    1. On the nav bar, click or tap Microsoft Dynamics CRM > Settings.

      Settings appears on the nav bar.

    2. Click or tap Settings > Administration > Security Roles.

    If using CRM for Outlook

    1. In the Navigation Pane, expand your organization if necessary, and then click or tap Settings > System > Administration > Security Roles.
  3. In the list of security roles, double-click or tap a name to open the page associated with that security role.

  4. Set the privileges on each tab.

    To change the access level for a privilege, click the symbol until you see the symbol you want. The possible access levels depend on whether the record type is organization-owned or user-owned.

    Tip

    To cycle through the access levels, you can also click the privilege column heading, or click the record type multiple times.

  5. When you have finished configuring the security role, on the toolbar, click or tap Save and Close.

Minimum privileges for common tasks

It's helpful to keep in mind the minimum privileges that are needed for some common tasks. These include:

  • When logging in to Microsoft Dynamics CRM:

    • To render the home page, assign the following privileges on the Customization tab: Read Web Resource, Read Customizations

    • To render an entity grid (that is, to view lists of records and other data): Read privilege on the entity, Read User Settings on the Business Management tab, and Read View on the Customization tab

    • To view single entities in detail: Read privilege on the entity, Read System Form on the Customization tab, Create and Read User Entity UI Settings on the Core Records tab

  • When logging in to CRM for Outlook:

    • To render navigation for Microsoft Dynamics CRM and all Microsoft Dynamics CRM buttons: Read Entity and Read View on the Customizations tab

    • To render an entity grid: Read privilege on the entity, Read Customizations and Read Web Resource on the Customization tab, and Read Saved View on the Core Records tab

    • To render entities: Read privilege on the entity, Read System Form on the Customization tab, Create, Read and Write User Entity UI Settings on the Core Records tab

See Also

Security concepts for Microsoft Dynamics CRM
Control data access
Manage security, users and teams
Copy a security role

© 2016 Microsoft Corporation. All rights reserved. Copyright