Error when trying to retrieve data from the network: Principal user (Id=xxa, type=8, roleCount=1, privilegeCount=438, accessMode='0 Read-Write', MetadataCachePrivilegesCount=4023, businessUnitId=xxx), is missing prvReadcre05_Formadores privilege (Id=1cxxx) on OTC=10438 for entity 'cre05_formadores'

(0) Share

Report

Posted on by WebPortal

2,295

When deploying a solution to a test environment:

One user has been added and assigned the role "Basic user" - for testing purposes, this user will only be able to use the app but not the app maker nor the backend data.
The user opens the app but upon opening the following error message is displayed:

Error when trying to retrieve data from the network: Principal user (Id=xxa, type=8, roleCount=1, privilegeCount=438, accessMode='0 Read-Write', MetadataCachePrivilegesCount=4023, businessUnitId=xxx), is missing prvReadcre05_Formadores privilege (Id=1cxxx) on OTC=10438 for entity 'cre05_formadores' (LocalizedName='Formadores'). context.Caller=07xxx. Consider adding miss...

So it seems the user has no privileges to access the Dataverse tables.

What kind of configurations should be done in this environment?

Thanks!

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (12)

Answers (1)

Jonathan Manrique 2,687 on at

Like (1)

Report

Hi @WebPortal

What the message is telling you is that the user does not have permission on the table to read the data, you must search in basic role to find that table that you have customized and give it read-only access so that the user can see the table

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.
You can accept more than one post as a solution

Was this reply helpful? Yes No
Parvez Ghumra 1,579 Moderator on at

Like (1)

Report

@WebPortal It seems your app is attempting to retrieve data from your custom 'cre05_formadores' table in the context of the user running the app. The user, therefore, requires a minimum of read privileges on this table.

You should grant such privileges on one of the Security Roles in your solution in your dev environment, then export the solution as managed again and import it into your target environment. Then either assign this Security Role directly to the affected User in the target environment, or assign it to a Team and make the user a member of that Team

Was this reply helpful? Yes No
WebPortal 2,295 on at

Like (0)

Report

@Jmanriquerios

Thanks for your help.

It seems the role has to be configured in all the tables, but for example this one "Formadores" does not allow for Basic User configs:

Was this reply helpful? Yes No
Parvez Ghumra 1,579 Moderator on at

Like (1)

Report

@WebPortal You'll need to grant this privilege on a custom Security Role

Was this reply helpful? Yes No
Jonathan Manrique 2,687 on at

Like (1)

Report

Hi @WebPortal

If by default you cannot modify it.
The suggestion is to duplicate the role, create a copy of the Basic User (it is always a recommended practice, not to use the default roles but to clone them), and then the one you have cloned if you can modify it and assign that to the user

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.
You can accept more than one post as a solution

Was this reply helpful? Yes No
WebPortal 2,295 on at

Like (0)

Report
@parvezghumra

Ok, I must then create a new security role in the DEV environment with permissions to all the custom tables, correct?

And what permissions should these be:
Create
Read
Write
Delete
Append
Append to
Assign
Share
Basically, the user will be able to see the data within the canvas app, make changes, delete data, all from within the app without reaching the Dataverse directly.

Thank you

Was this reply helpful? Yes No
Jonathan Manrique 2,687 on at

Like (1)

Report

Hi @WebPortal

You must check CRUD permission for each of the custom tables, following the previous advice. Copy the Basic USer role and customize on that

Was this reply helpful? Yes No
WebPortal 2,295 on at

Like (0)

Report

OK, I've figured out that the security role must be created in the DEV environment and added to the solution so that it can be exported -> imported into the PROD/TEST environment.

Was this reply helpful? Yes No
Verified answer

Jonathan Manrique 2,687 on at

Like (1)

Report

Hi @WebPortal

If you must include the security role in your solution and transport it to the rest of the environments. Then you must give the role to the user.
One last tip remember to assign the role to the application you have built

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.
You can accept more than one post as a solution

Was this reply helpful? Yes No
LotusD 8 on at

Like (0)

Report

I am having a similar issue. What if I have the basic user and one other role and they are added to the tables. I also have this issue with SQL connection tables.

Was this reply helpful? Yes No