Security Roles - Create Right

(0) Share

Report

Posted on by sam777

Hello,

I'm having a hard time understanding a specific part of security roles in Dataverse.

If I give Read permissions at the User level, the person will only be able to see the records they are the owner of.

If I give Read permissions at the Business Unit level, the person will be able to see their records and the ones of the other people in the same business unit.

The same logic goes for edit and deleting, which is pretty simple to explain.

The problem I have is with the Create permission.

What is the different between User Create vs Business Unit Create vs Organization Create?

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (4)

Answers (0)

Drew Poggemann 9,287 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

Hi @sam777 ,

You are correct on your understanding of the permissions...

The create aligns with when you create the record, if you have Create at the User level then the owner on the record needs to be yourself or a team you are involved it. You would not be able to set the owner (on creation) to another user in the business unit etc.

Was this reply helpful? Yes No
sam777 4 on at

Like (0)

Report
Copy link

Link copied!

So if the only possible owner of a record is the person creating it, why do we have the option to set it as something else in the security role management screen?
Should it not just be a turn on/turn off circle rather being able to toggle between No Accss/User/BU/Parent/Organisation?

Was this reply helpful? Yes No
Drew Poggemann 9,287 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @sam777 ,

Not sure of your question here... If you create a record in the user interface (like in a model-driven app) or through API, workflow, etc. you can set the owner when you create the record. If you have the Create permission set at User level then you can only set yourself as the owner, if you have the Business Unit then you can set the owner on create to any user in the BU, if you have set at Organization level then you can set the owner to any user across all the BUs...

Was this reply helpful? Yes No
sam777 4 on at

Like (0)

Report
Copy link

Link copied!

Is it like an impersonating feature?
How would you set the owner as someone in your BU, using a Model-Driven app?

Was this reply helpful? Yes No