Contacts are inheriting web roles permissions form parent account

(0) Share

Report

Posted on by GhostPickle

I created a custom N:N relationship between accounts and web roles so I could have a flow auto assign contacts default web roles based on the account. However, now I'm seeing that contacts can see all of the pages the parent account has access to even if the contact has no web roles. Does anyone know how this can be turned off? This isn't due to the authenticated user checkbox on the web roles itself.

Categories:

Security

I have the same question (0)

All responses (2)

Answers (0)

Suggested answer

Fubar 8,350 Super User 2025 Season 2 on at

Like (0)

Report
If you Contact record does not have any Web Roles directly assigned against them then:

They are most likely inheriting off a Web Role that has the Anonymous/Authenticated Users checkbox checked. Double check there are no Web Roles (even Inactive ones) that have it checked. There is not standard behavior where a Contact gets permissions other than from a Web Role (or vicariously through Account).

After making Web Role changes, you have not made sure that the portal cache has been cleared. Either by waiting 15 mins (Microsofts SLA), or re-previewing the portal from inside the Designer (at times previewing is not 100% reliable), or logging into the portal as a contact with the Administrators Web Role and manually clearing the cache from the button at <your_site_url>\_services\about , or 'bouncing' the portal from the Admin Center

Beyond that you would need to log a support call with Microsoft.

Was this reply helpful? Yes No
Suggested answer

SaiRT14 1,990 Super User 2025 Season 2 on at

Like (0)

Report

When a custom N:N relationship is created between Accounts and Web Roles, Dynamics 365 might interpret that a related Contact inherits access to the pages associated with the Account. This behavior could override the Web Roles assigned directly to the Contact, resulting in unintended access.

pls try the following:

Navigate to the Account-Web Role Relationship in Power Apps or Advanced Settings.

Check the Behavior Settings: Ensure that the Cascade All or similar cascading behaviors are not unintentionally granting access.= Modify cascading behavior to None or only allow necessary actions.

Was this reply helpful? Yes No