In the previous post, we created a simple custom API https://nishantrana.me/2021/01/13/use-custom-api-to-create-custom-messages-in-dynamics-365/
Let us look at its different properties starting with ExecutePrivilegeName
Execute Privilege Name attribute of custom API allows us to specify the name of the privilege that allows execution of the custom API.
Let us update the custom API and specify the privilege name.
For simplification, we have used prvCreateIncident here i.e. Create Case / Incident Privilege.
To get the Privilege name
https://%5Borgname%5D.api.crm.dynamics.com/api/data/v9.1/privileges?$select=name
To test, we updated the security of the Application User to Sales Manager role which doesn’t have the create incident privilege.
Calling the custom API this time as expected gave us the below error
{“error”:{“code”:”0x80040220″,”message”:”Principal user (Id=0f377e29-5545-eb11-a813-000d3a9bf733, type=8, roleCount=1, privilegeCount=727, accessMode=4), is missing prvCreateIncident privilege (Id=6cf9442b-e690-4cad-8b0a-e60464960b93) on OTC=112 for entity ‘incident’. context.Caller=0f377e29-5545-eb11-a813-000d3a9bf733″}}
If we specify an incorrect privilege name we would get the below error and will not be able to save the record.
Hope it helps..
Advertisements
- When Entity.Id Is Guid.Empty with QueryExpression.Distinct = True (Dataverse)
While optimising the performance of a Dataverse plugin, we noticed a QueryExpression using ColumnSet(true). The business logic only required a few attributes, so replacing ColumnSet(true) with a minimal ColumnSet looked like an easy performance improvement. The query also used Distinct = true, which we left unchanged because it … Continue reading “When Entity.Id Is Guid.Empty with QueryExpression.Distinct = True (Dataverse)” - Implementing Cloudflare Turnstile for Dynamics 365 Customer Insights – Journeys Real-Time Marketing Forms
Check the previous posts for more details – In one of our recent projects, we implemented Cloudflare Turnstile (Invisible) for a Dynamics 365 Customer Insights – Journeys Real-Time Marketing form. In this post, we’ll look at how to configure Cloudflare Turnstile, integrate it with the marketing form using … Continue reading “Implementing Cloudflare Turnstile for Dynamics 365 Customer Insights – Journeys Real-Time Marketing Forms” - Custom Form Submission Validation in Dynamics 365 Customer Insights – Journeys: Inside the Validation Pipeline and the “ms_captcha_solution” Error
While implementing custom form submission validation (server side validation) for Dynamics 365 Customer Insights – Journeys Real-Time Marketing forms, we came across the following error, “Required params cannot be null or empty –ms_captcha_solutionms_captcha_typems_captcha_flow_id” after enabling the data-validate-submission attribute on the form as shown below. Setting this attribute to … Continue reading “Custom Form Submission Validation in Dynamics 365 Customer Insights – Journeys: Inside the Validation Pipeline and the “ms_captcha_solution” Error” - Implementing Server-Side Honeypot Validation for Dynamics 365 Customer Insights – Journeys Forms
In our previous post, we implemented a simple Honeypot for Dynamics 365 Customer Insights – Journeys Real-Time Marketing forms using JavaScript. Although that prevents most automated submissions, the validation only runs in the browser. Anyone can bypass the JavaScript and submit requests directly to the server. Fortunately, Customer … Continue reading “Implementing Server-Side Honeypot Validation for Dynamics 365 Customer Insights – Journeys Forms” - Implementing a Simple Honeypot in Dynamics 365 Customer Insights – Journeys Real-time Marketing Forms
While working with Dynamics 365 Customer Insights – Journeys Real-time Marketing Forms, we wanted to explore a simple way of reducing bot submissions. A common technique used on websites is a honeypot. The idea is straightforward: In this post, we’ll implement this using the supported Client-side Extensibility events … Continue reading “Implementing a Simple Honeypot in Dynamics 365 Customer Insights – Journeys Real-time Marketing Forms” - Retrieve All One-to-Many Relationships and Cascade Delete Behavior for a Dataverse Table Using C#
While working on a Dynamics 365 Field Service cleanup, we needed to delete a large number of Work Order records. Before doing so, we wanted to understand exactly what would happen to the related records. Not every relationship is configured for Cascade Delete. Many use RemoveLink, which doesn’t … Continue reading “Retrieve All One-to-Many Relationships and Cascade Delete Behavior for a Dataverse Table Using C#” - Why SQL4CDS Record Counts May Not Match Advanced Find for Date Filters (Dataverse / Dynamics 365)
While validating some Dynamics 365 Field Service data recently, we came across an interesting scenario where SQL4CDS and Advanced Find returned different record counts even though the date filters appeared to be identical. At first glance it was surprising to see different record counts being returned despite using … Continue reading “Why SQL4CDS Record Counts May Not Match Advanced Find for Date Filters (Dataverse / Dynamics 365)” - How We Successfully Removed the Resco Woodford Managed Solution from Dynamics 365 Field Service
Recently, we needed to remove the legacy Resco MobileCRM (Woodford) managed solution from a Dynamics 365 Field Service environment. Although the uninstall initially appeared straightforward, when we attempted to uninstall the Woodford solution, Dynamics 365 displayed a list of dependencies that needed to be addressed before. The dependencies … Continue reading “How We Successfully Removed the Resco Woodford Managed Solution from Dynamics 365 Field Service” - Unable to Delete Work Order Due to “The Time To Promised Must Be Later Than The Time From Promised” exception – Dynamics 365 Field Service
While attempting to delete a historical Dynamics 365 Field Service Work Order, we encountered the following error: Exception Message: The time to promised must be later than the time from promised. ErrorCode: -2147220891 HexErrorCode: 0x80040265 Error Details: {“errorCode”:2147746405,”message”:”The time to promised must be later than the time from … Continue reading “Unable to Delete Work Order Due to “The Time To Promised Must Be Later Than The Time From Promised” exception – Dynamics 365 Field Service” - Open a Power Automate Flow for Edit Without Fixing Broken Connections First
While reviewing Power Automate flows recently, we ran into an issue where we could not open a flow in edit mode When opening the flow, Power Automate displayed the “This flow will connect to” screen and requested that we fix one or more connections before proceeding. In our … Continue reading “Open a Power Automate Flow for Edit Without Fixing Broken Connections First”
We also need to enable Relevance search on the environment for the mobile app’s search to work.
Nishant Rana's Weblog 