Microsoft Dynamics CRM 2011 – Insufficient Permissions

Today I was presented with the following error with Microsoft Dynamics CRM 2011:

Insufficient Permissions
The signed-in user does not have the appropriate security permissions to view these records or perform the specific action. Contact your organization’s Microsoft Dynamics CRM administrator to review the security permissions for this user.

Downloaded Log file details:

Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: System.Web.HttpUnhandledException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #9017EC98Detail:
<OrganizationServiceFault xmlns:i=”http://www.w3.org/2001/XMLSchema-instance” xmlns=”http://schemas.microsoft.com/xrm/2011/Contracts”>
<ErrorCode>-2147220970</ErrorCode>
<ErrorDetails xmlns:d2p1=”http://schemas.datacontract.org/2004/07/System.Collections.Generic” />
<Message>System.Web.HttpUnhandledException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #9017EC98</Message>
<Timestamp>2011-12-12T09:31:41.7668235Z</Timestamp>
<InnerFault>
<ErrorCode>-2147220960</ErrorCode>
<ErrorDetails xmlns:d3p1=”http://schemas.datacontract.org/2004/07/System.Collections.Generic” />
<Message>RoleService::VerifyCallerPrivileges failed. User: b5843300-64c1-e011-b6cb-00155d087d2e, PrivilegeName: prvReadPostFollow, PrivilegeId: 2208583f-626b-11e0-834f-1cc1de634cfe, Depth: Global, BusinessUnitId: 7b9fc999-7221-e111-8b54-005056a50003</Message>
<Timestamp>2011-12-12T09:31:41.7668235Z</Timestamp>
<InnerFault i:nil=”true” />
<TraceText i:nil=”true” />
</InnerFault>
<TraceText i:nil=”true” />
</OrganizationServiceFault>

I thought how could this possibly be? I am the System Administrator!  Therefore I knew that something was seriously wrong with this instance of CRM.  I couldn’t add any Security Roles to any user of the CRM 2011 system.  Before I found the issue (which I’m about to tell you) I ran a number of SQL statements to check all the privileges of the user I was using. However, these all looked ok. I do know this environment was built by taking a SQL backup of the _MSCRM database from another environment and making it available via the Import Organisation option within the CRM Deployment Manager. So what could it be?

The Cause

The cause was that I had two different environments of CRM 2011 installed i.e. UR3 vs UR5.  The environment the error was shown had Update Rollup 3 installed. The database backup of the CRM system was taken fromand environment which had the Update Rollup 5 installed. I then checked the versions (File > Help > About Microsoft Dynamics CRM).

Microsoft Dynamics CRM 2011 with Update Rollup 3 – 5.0.9688.1244

Microsoft Dynamics CRM 2011 with Update Rollup 5 – 5.0.9688.1533

So sure enough, they are different! 5.0.9688.1244 != 5.0.9688.1533

The Fix

Install Microsoft Dynamics CRM 2011 Update Rollup 5 file called CRM2011-Server-KB2567454-ENU-amd64.exe (54.9MB) to your CRM 2011 Web Server where Update Rollup 5 was not installed.  Remember, the error was presented on the environment with only Update Rollup 3 installed.
Once you have completed the install and restarted the server, retry adding a Security Role to a user. You should notice you can now add the desired Security Role because we now have the same Update Rollup applied from the environment the CRM system was originally built from.

Hope that helps you?

Greg Olsen
YellowDuckGuy

Advertisement