Home > Dynamics CRM, Microsoft > Microsoft Dynamics CRM 2011 – Insufficient Permissions

Microsoft Dynamics CRM 2011 – Insufficient Permissions

Today I was presented with the following error with Microsoft Dynamics CRM 2011:

Insufficient Permissions
The signed-in user does not have the appropriate security permissions to view these records or perform the specific action. Contact your organization’s Microsoft Dynamics CRM administrator to review the security permissions for this user.

CRM 2011 - System Administrator Permissions Issue

Downloaded Log file details:

Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: System.Web.HttpUnhandledException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #9017EC98Detail:
<OrganizationServiceFault xmlns:i=”http://www.w3.org/2001/XMLSchema-instance” xmlns=”http://schemas.microsoft.com/xrm/2011/Contracts”>
<ErrorDetails xmlns:d2p1=”http://schemas.datacontract.org/2004/07/System.Collections.Generic” />
<Message>System.Web.HttpUnhandledException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #9017EC98</Message>
<ErrorDetails xmlns:d3p1=”http://schemas.datacontract.org/2004/07/System.Collections.Generic” />
<Message>RoleService::VerifyCallerPrivileges failed. User: b5843300-64c1-e011-b6cb-00155d087d2e, PrivilegeName: prvReadPostFollow, PrivilegeId: 2208583f-626b-11e0-834f-1cc1de634cfe, Depth: Global, BusinessUnitId: 7b9fc999-7221-e111-8b54-005056a50003</Message>
<InnerFault i:nil=”true” />
<TraceText i:nil=”true” />
<TraceText i:nil=”true” />

I thought how could this possibly be? I am the System Administrator!  Therefore I knew that something was seriously wrong with this instance of CRM.  I couldn’t add any Security Roles to any user of the CRM 2011 system.  Before I found the issue (which I’m about to tell you) I ran a number of SQL statements to check all the privileges of the user I was using. However, these all looked ok. I do know this environment was built by taking a SQL backup of the _MSCRM database from another environment and making it available via the Import Organisation option within the CRM Deployment Manager. So what could it be?

The Cause

The cause was that I had two different environments of CRM 2011 installed i.e. UR3 vs UR5.  The environment the error was shown had Update Rollup 3 installed. The database backup of the CRM system was taken fromand environment which had the Update Rollup 5 installed. I then checked the versions (File > Help > About Microsoft Dynamics CRM).

Microsoft Dynamics CRM 2011 with Update Rollup 3 – 5.0.9688.1244

DEV Version2

Microsoft Dynamics CRM 2011 with Update Rollup 5 – 5.0.9688.1533

UAT Version2

So sure enough, they are different! 5.0.9688.1244 != 5.0.9688.1533

The Fix

Install Microsoft Dynamics CRM 2011 Update Rollup 5 file called CRM2011-Server-KB2567454-ENU-amd64.exe (54.9MB) to your CRM 2011 Web Server where Update Rollup 5 was not installed.  Remember, the error was presented on the environment with only Update Rollup 3 installed.
Once you have completed the install and restarted the server, retry adding a Security Role to a user. You should notice you can now add the desired Security Role because we now have the same Update Rollup applied from the environment the CRM system was originally built from.

Hope that helps you?

Greg Olsen

Categories: Dynamics CRM, Microsoft
  1. Kelvin
    December 13, 2011 at 8:36 pm

    Sorry, I just a bit confused about the context here. You cannot possibly have 2 Crm RUs installed on the same Crm server. Do you have multiple Crm servers share the same SQL server? Cheers!

    • December 14, 2011 at 10:23 pm

      Hi Kelvin,
      It wasn’t 100% clear in the article on the background. I have updated the article with this information. Thanks for the feedback.

  2. Neil Benson
    February 1, 2012 at 6:48 am

    Greg, I get the same error with UR6. I think the cause is different to the one you have deduced.

    The error occurs when the logged on user has the System Administrator security role and the Administrative access mode. The error doesn’t occur when the logged on user has the System Administrator security role and the Read-Write access mode.

    I think it’s a bug with the Administrative access mode that isn’t resolved in any UR yet.

  3. TV
    February 28, 2012 at 11:07 pm

    Hi Guys,
    Same issue here, but the error only occurs for one user. Other users are able to change these roles perfectly.. Very strange.

  4. February 29, 2012 at 3:13 am

    Great post Greg, i had a similar issue. I have referenced your link on my blog, hope you don’t mind.


    • March 11, 2012 at 5:53 pm

      Thanks. Happy for you to reference my blog.

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: