Answered

Role and Column Security Issue

(0) Share

Report

Posted on by ripgoofy

I have a table that I would like accessible to a group of users, with only one column editable by those users. They can view all columns, but only edit one (ColumnName: Status).

I have only given them "Read" access in "Security Roles", but configured Column Security to allow them to update that single column. The users have been added to both the security role group AND the column security profile. However, when the user goes in, they cannot edit any of the columns including the "Status" column that I am allowing.

I assume that I am misunderstanding how security permissions should work in Dataverse and would appreciate any help/suggestions that you can provide.

Categories:

Governance & administering

All responses (10)

Answers (1)

Sort by

joe_hannes_col 1,843 Super User 2024 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Hello @ripgoofy,

How does this look from the users' perspective? Are the fields visible in a form? Can they change values, but changes are not saved?
Have you tried also granting the read privilege through your column security profile?
Are you applying this to the standard Status column in the table? If so, you might also want to grant similar rights to the Status Reason column, as these two columns work in tandem.
ripgoofy 16 on at

Like
a
(0)

Report
Copy link

Link copied!

Hello,

Thank you for the reply. The fields are visible, but they cannot edit them. The status field is a column that I created, so not the standard one. The Read Privilege for the column security profile is a good point, so I went in and changed that. However, still no luck. All fields are greyed out with the disclaimer above stating that they do not have permission. See screenshot below with data covered up:
joe_hannes_col 1,843 Super User 2024 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Have you enabled Column Security for your column?
If you enter data into the column as an admin, do users see the data, or is it anonymized?
ripgoofy 16 on at

Like
a
(0)

Report
Copy link

Link copied!

Yes, Column Security is enabled for all of the mentioned columns with Status the only one with Edit access. The data is visible to the user, not anonymized.
joe_hannes_col 1,843 Super User 2024 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Sounds like the column security profile is not applied. Have you published all customizations, including your table that you made the changes to?
ripgoofy 16 on at

Like
a
(0)

Report
Copy link

Link copied!

Just published the table and double checked the column security. All readable columns are set to "Allowed" on Read and "Allowed" on columns that need to be read and updated. However, user is still having the same issue where they cannot edit field.

Also double checked to make sure user was in the correct Security Profile and Column Security Group.
Verified answer

joe_hannes_col 1,843 Super User 2024 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Hello @ripgoofy,
Potentially your security role(s) and column security profile are conflicting. Could you please try to give the user Write access to the row through a new or existing security role? If I understood correctly, the user only has Read privileges through row-level security so far.
ripgoofy 16 on at

Like
a
(0)

Report
Copy link

Link copied!

This was the issue - after I made the change it worked fine. Thank you so much for your help!!!!
joe_hannes_col 1,843 Super User 2024 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Glad it works, @ripgoofy 🙂
achyuatkumar Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

@ripgoofy were the users also allowed to edit other columns after you allowed them edit rights on the row?
If users were not able to do edits on other column, how did you restrict it?