Hello! In my model-driven app solution, we have assigned the Owner of a record to a Team (eg. TEAM100). A user is assigned a security role which provides the WRITE privilege on that record's table. That user is then joined to TEAM100. My issue is that when the user opens a record which is owned by TEAM100, then that record is opening in a read-only mode.
My impression of how Dataverse security works is that a user's access to a record is the cumulative of their own privileges PLUS the team's privileges. So in the case above, the user has WRITE on the table, and TEAM100 owns the record, so user should be able to write to that record.
Where am I misunderstanding? Thanks in advance!