Privileges required for customization

Applies To: Dynamics CRM 2013

Individuals can personalize the system and even share some of their customizations with others, but only users with the correct privileges can apply changes for everyone using Microsoft Dynamics CRM 2013 and Microsoft Dynamics CRM Online.

In This Topic

System Administrator and System Customizer security roles

Delegate customization tasks

Test customizations without customization privileges

System Administrator and System Customizer security roles

Almost everyone who customizes Microsoft Dynamics CRM will have the System Administrator or System Customizer security role associated with their CRM account. These security roles give you the permissions you need to customize your CRM deployment.

The difference between the System Administrator and System Customizer security roles is that a system administrator has read privileges on most records in the system and can see everything. Assign the System Customizer role to someone who needs to perform customization tasks but shouldn’t see any data in the system entities. However, testing is an important part of customizing the system. If system customizers can’t see any data, they will need to create records to test their customizations. By default, system customizers have full access to custom entities. If you want to have the same limitations that exist for system entities, you’ll need to adjust the system customizer security role so that the access level is User rather than Organization for custom entities.

Delegate customization tasks

You might want to delegate some tasks to trusted people so that they can apply changes they need. Keep in mind that anyone can have multiple security roles associated with their user account and that privileges and access rights granted by security roles is based on the least restrictive level of permissions.

This means that you can give the System Customizer security role to someone who already has another security role, perhaps a sales manager., This lets them customize the system in addition to other privileges they already have. You don’t need to edit the security role they already have, and you can remove the System Customizer security role from the person’s user account when you want.

Test customizations without customization privileges

You should always test any customizations you make with a user account that doesn’t have customization privileges. This way you can make sure that people without the System Administrator or System Customizer security roles will be able to use your customizations. To do this effectively, you need access to two user accounts: One account with the System Administrator security role and another that has the security roles that represent the people who will be using the customizations.

See Also

Getting started with customization
Customization concepts
Use solutions for your customizations

© 2016 Microsoft Corporation. All rights reserved. Copyright