Permission for Tables Type "Activity"

(0) Share

Report

Posted on by Aikuido2

205

I have a problem: I have some users with a “Environment Maker” role who shouldn't have admin privileges.

However, they need to be able to grant permissions to all Dataverse tables on their own. So I assigned the “System Customizer” role to them, and now they can grant permissions to all tables themselves. However, they cannot grant permissions for tables of the “Activity” type. Do you have any idea how I can solve this without having to assign the System Administrator role to that person? Ideally, it would be best if that person could only grant permissions for this type of table and nothing else (principle of least privilege).

Categories:

Governance & administering

I have the same question (0)

All responses (4)

Answers (0)

Sort by

ronaldwalcott 3,906 Moderator on at

Like (0)

Report
Copy link

Link copied!

Is there a reason that you cannot access the admin center and create a new role with the privileges that you need for the user?

Was this reply helpful? Yes No
Aikuido2 205 on at

Like (0)

Report
Copy link

Link copied!

Yeah i can add a new role, but is there a permission for tables of the type "activity"?

Was this reply helpful? Yes No
ronaldwalcott 3,906 Moderator on at

Like (0)

Report
Copy link

Link copied!

Not quite sure what you mean but see

Activity table (Microsoft Dataverse) - Power Apps | Microsoft Learn

Was this reply helpful? Yes No
Suggested answer

11manish 2,430 on at

Like (1)

Report
Copy link

Link copied!
Yes — this behavior is expected in Dataverse security because Activity tables (Email, Task, Appointment, Phone Call, custom activity tables, etc.) are treated

differently from standard tables.

The System Customizer role can customize the system and grant many permissions, but it does not automatically provide all privilege-management capabilities

for Activity tables. Activity tables have additional ownership/security dependencies tied to:

ActivityPointer

ActivityParty

organization-level activity privileges

append/append-to relationships

That’s why users can manage normal tables but fail for Activity-type tables.

Recommended Solution (Least Privilege Approach)

Instead of assigning System Administrator, create a custom security role with only the required Activity-related privileges.

Was this reply helpful? Yes No