Answered

Dataverse Backend for MS Access - Error "Database or object is read-only"

(0) Share

Report

Posted on by Molly_M

Just migrated the tables of an MS Access database to a DataVerse Environment. As the Admin, I can now open the access database and view/edit the data. However my users get a message that the database is read only.

I setup a production environment for the DataVerse tables. A security group (MS365 Sec Group) is assigned to the environment and the user are in the security group. I also added all of the users to the default/parent business unit.

I've been trying to figure out all the various security documentation - but it seems to be focused on power-apps, not connecting via an MS Access front end. Any ideas?

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (6)

Answers (1)

gulshankhurana 1,397 Moderator on at

Like (0)

Report

Hi @Molly_M

Please could you check which security role has been assigned to the users and what is the level of permissions granted under that role.

You may also find this link helpful:
https://learn.microsoft.com/en-us/power-platform/admin/wp-security-cds

I hope this helps. If you like my reply then please give it a thumbs up. If it helps resolve your query then please accept it as a solution.

Kind regards

Gulshan

Was this reply helpful? Yes No
Mira Ghaly 11,413 Moderator on at

Like (0)

Report

@Molly_M

Sorry if my question sounds stupid,

Are the users unable to access dataverse or access?

The dialogue you are sharing doesn't look like a dataverse error message style.

Was this reply helpful? Yes No
Molly_M 12 on at

Like (0)

Report
To answer both questions -
The users are all members of the Security Group shown above that is linked to the Environment. (SecGp_DataEditor_MR). Note that this security was created in the MS365 Admin Center as a Security Group. It appears that Dataverse is also using the term "Security Group" for other things. So that part is a bit confusing.
The user can open the access database (front end). When they try to open a page of data, they get the error above. Weirdly though, if they go to the linked table manager, they are able to link to a table in the Dataverse.
With my account, I can open the access database and successfully edit a record on a page without issue (though it is quite slow).

Was this reply helpful? Yes No
Verified answer

gulshankhurana 1,397 Moderator on at

Like (0)

Report

Hi @Molly_M

Regarding the 'confusing bit' part, please check the following links regarding User Security, Roles and Privileges:

https://learn.microsoft.com/en-us/power-platform/admin/database-security#assign-security-roles-to-users-in-an-environment-that-has-a-dataverse-database

https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges

Essentially, a security role has information regarding what level of permissions (e.g. None, User level, Business Unit level, Parent/Child Business Unit level or Organisation level) are there on a table for various actions (e.g. Create, Read, Write, Delete, Append, Append to, Share and Assign).
The security role is then assign to a user (directly or through a team that the user is a member of).
If a User has no write permission on a table then they cannot update the record or if the user has only User level write access to a table then the user can only update those records where that user is the owner of the record in that table.

In your case, it could be a security permissions issue either at the front-end (MS Access application) or at the back-end (Dataverse).
I hope this information helps.

Was this reply helpful? Yes No
Fubar 8,352 Super User 2025 Season 2 on at

Like (0)

Report

@Molly_M just for your clarity - Being a member of an Office 365 Security Group, does not automatically give those uses access to Dataverse. Inside Dataverse you need to assign a Dataverse Security Role to either the (Dataverse) User records directly or a (Dataverse) Team the users belong to. (depending on your configuration it is possible that their is a Dataverse Team for your Security Group - but it depends on how you have things setup).

The interface does not matter, access to Dataverse is controlled by the same (RBAC) Dataverse Security Roles.

(if you were the user that setup Dataverse, then your User in dataverse will automatically have been assigned the dataverse System Administrator Security Role - which gives full access to configuration and data - or you may be an Office 365 Global Administrator etc note: just being an Office 365 Global Administrator will not give you full access to all the data (but does give access to assign Security Roles that do).

Was this reply helpful? Yes No
Molly_M 12 on at

Like (1)

Report

Thanks for everyone's help...I hadn't realized how many "fun" layers there were to security here - it seems that some of this is remnants from Dynamics. For anyone else in my situation - I found this video to be extremely helpful: https://www.youtube.com/watch?v=p4IAkz6yd5E

Was this reply helpful? Yes No