QuestionQ416

Configure business process automation

You have a model-driven app that uses Common Data Service (CDS). You create three custom entities that have many-to-one parental relationships with the Account entity.

You run a real-time workflow that assigns an account you own to another user and receive the error shown in the Error Message exhibit. (Select the Error Message tab.)

Question Image

You review the user's security roles in the Manage User Roles exhibit. (Select the Manage User Roles tab.) You also review that role’s privileges in the Common Data Service User Security Role exhibit. (Select the Security Role tab.)

Question Image

Question Image

You must prevent the error from happening again.

For each statement, select Yes if it is true; otherwise, select No.

Yes or No
StatementsYesNo
Changing the Append To privilege on the Account entity to Organization prevents the error from recurring.
Adding the Environment Maker role to the user prevents the error from recurring.
Adding the system customizer role gives the user more access than needed to prevent the error from recurring.
Setting all the privileges for the Building entity to User prevents the error from recurring.
Explanation

prvReadcreb4_Building is a missing Read privilege on the Building table, not an Account Append To permission. Environment Maker does not grant Dataverse data access. System Customizer grants broad Dataverse customization/data access, exceeding the narrowly required table privilege. Building privileges at User scope include Read access to the user's own records, resolving the missing privilege under least privilege.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!