Issue disabling the contact user synch filter

[gmanunta81]

the issue appeared today after 5 ears working properly and I assume MS did something on CRM Online or something happened in the Exchange Online Integration with the CRM

if I impersonate the user for wich,I want to disable the setting and I use the version 2021.7.3 is working fine

steps to reproduce the issue.

1) Open Synch filter manager with a CRM system administrator 2) click on tab User Synchronization Filter 3) untick the option Display Online filter 4) tick Load Users Synchronization Filters / and click for Specific Users 5) tyoe the user name in the search bar click Return 6) select the user 7) select a solution and click okay 8) modify the My outlook Contacts setting and click the Disable button

this is the text issue System.ServiceModel.FaultException`1[Microsoft.Xrm.Sdk.OrganizationServiceFault]: Principal with id 15450dcf-6571-e911-a81a-000d3a3a632e does not have ReadAccess right(s) for record with id 58278927-2bbc-47de-87b3-2437fe392b45 of entity userquery. Details: {"CallerPrincipal":{"PrincipalId":"15450dcf-6571-e911-a81a-000d3a3a632e","Type":8,"IsUserPrincipal":true},"OwnerPrincipal":{"PrincipalId":"8bd33e12-f2cf-e911-a82e-000d3a3a6eb0","Type":8,"IsUserPrincipal":true},"ObjectId":"58278927-2bbc-47de-87b3-2437fe392b45","ObjectTypeCode":4230,"EntityName":"userquery","ObjectBusinessUnitId":"2338fc07-89fa-e811-a95c-000d3a442d08","RightsToCheck":"ReadAccess","RoleAccessRights":"None","PoaAccessRights":"None","HsmAccessRights":"None","GrantedAccessRights":"None","Messages":["BasicMinimumPrivilegeDepthRequired = None","EntityUserGroupRights = None","LocalMinimumPrivilegeDepthRequiredRights = ReadAccess","SecLib::AccessCheckEx2 failed. Owner Data: roleCount=11, privilegeCount=997, accessMode='0 Read-Write', AADObjectId='cc089bc9-4cd7-4726-a83f-d3d50b31bc2c', MetadataCachePrivilegesCount=12778, busines... (Fault Detail is equal to Exception details: ErrorCode: 0x80048306 Message: Principal with id 15450dcf-6571-e911-a81a-000d3a3a632e does not have ReadAccess right(s) for record with id 58278927-2bbc-47de-87b3-2437fe392b45 of entity userquery. Details: {"CallerPrincipal":{"PrincipalId":"15450dcf-6571-e911-a81a-000d3a3a632e","Type":8,"IsUserPrincipal":true},"OwnerPrincipal":{"PrincipalId":"8bd33e12-f2cf-e911-a82e-000d3a3a6eb0","Type":8,"IsUserPrincipal":true},"ObjectId":"58278927-2bbc-47de-87b3-2437fe392b45","ObjectTypeCode":4230,"EntityName":"userquery","ObjectBusinessUnitId":"2338fc07-89fa-e811-a95c-000d3a442d08","RightsToCheck":"ReadAccess","RoleAccessRights":"None","PoaAccessRights":"None","HsmAccessRights":"None","GrantedAccessRights":"None","Messages":["BasicMinimumPrivilegeDepthRequired = None","EntityUserGroupRights = None","LocalMinimumPrivilegeDepthRequiredRights = ReadAccess","SecLib::AccessCheckEx2 failed. Owner Data: roleCount=11, privilegeCount=997, accessMode='0 Read-Write', AADObjectId='cc089bc9-4cd7-4726-a83f-d3d50...).

[MscrmTools]

Can you confirm the id 15450dcf-6571-e911-a81a-000d3a3a632e is the user you are trying to update?

If so, I guess you would just have to update security roles used by this user to add the missing privilege?

[MikeP12321]

I and my team are running into the same error, irrespective of user. In our errors 15450dcf-6571-e911-a81a-000d3a3a632e would be the system admin trying to disable a filter (different ID of course).

[MscrmTools]

That would mean that even a user with an admin role could not read userquery record of another user, if I am correct

That will be a problem

[gmanunta81]

Dear all

First of all, my sincere apologise for the delay in getting back to you

I think that after the 2024 wave 1 release update something changed on Microsoft dynamics and it impacted admins only

Impersonating the user for which we want to update some personal setting with an old version of the plugin can fix the issue.

Regards

On Fri, 3 May 2024, 16:29 MscrmTools, @.***> wrote:

That would mean that even a user with an admin role could not read userquery record of another user, if I am correct

That will be a problem

— Reply to this email directly, view it on GitHub https://github.com/MscrmTools/MscrmTools.SyncFilterManager/issues/11#issuecomment-2093138335, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABKHYK6ORQZUW2MYOOW422DZAONONAVCNFSM6AAAAABGS2QJQCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOJTGEZTQMZTGU . You are receiving this because you authored the thread.Message ID: @.***>

[ACarlock]

I'm seeing the same issue while attempting to make this change as a Sys Admin.

@gmanunta81, can you describe how to do what you suggested above?

[gmanunta81]

Please downgrade the plugin version (one quite old version) then impersonate the user you want to change the settings(example the contact setting)

Let me know it it helps

Regards

Il giorno giovedì 16 maggio 2024, Alex Carlock @.***> ha scritto:

I'm seeing the same issue while attempting to make this change as a Sys Admin.

@gmanunta81 https://github.com/gmanunta81, can you describe how to do what you suggested above?

— Reply to this email directly, view it on GitHub https://github.com/MscrmTools/MscrmTools.SyncFilterManager/issues/11#issuecomment-2115970216, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABKHYK7EWQIVJZ65LON3SGTZCT55BAVCNFSM6AAAAABGS2QJQCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCMJVHE3TAMRRGY . You are receiving this because you were mentioned.Message ID: @.***>

-- Sent from Gmail Mobile

[ACarlock]

I figured it out... I uninstalled the plugin from XRM Toolbox, Found the plugin again, and while installing it, selected the oldest version I could find. I think this worked for me, in part, because when impersonating a non-sys admin, the older version doesn't request that I select a Solution. The new version asks for that, and most users don't have access to view solutions (and we're not going to grant that).

Thanks for the help.

[gmanunta81]

I learned recently that CRM toolbox offers the option plugin by plugin to downgrade it so from XRM toolbox you can choose which version you want to run. This option is available for the plugin we are talking right now not sure for others plugin.

Bye bye

Il giorno sabato 18 maggio 2024, Alex Carlock @.***> ha scritto:

I figured it out... I uninstalled the plugin from XRM Toolbox, Found the plugin again, and while installing it, selected the oldest version I could find. I think this worked for me, in part, because when impersonating a non-sys admin, the older version doesn't request that I select a Solution. The new version asks for that, and most users don't have access to view solutions (and we're not going to grant that).

Thanks for the help.

— Reply to this email directly, view it on GitHub https://github.com/MscrmTools/MscrmTools.SyncFilterManager/issues/11#issuecomment-2118622485, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABKHYK5DJJMIKYG7OJBPXRTZC3ECNAVCNFSM6AAAAABGS2QJQCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCMJYGYZDENBYGU . You are receiving this because you were mentioned.Message ID: @.***>

-- Sent from Gmail Mobile

[MscrmTools]

I don't understand the "select a solution". There is not solution selection in this tool, is it? Or it's too long since I did not use it

[ACarlock]

@MscrmTools, I'm not sure which version, but something after 1.2022.5.5 asks me to choose a CRM solution when I attempt to modify a user's sync options. Version 1.2022.5.5 does not make me choose this. I'm not sure why newer versions ask me to choose a solution, because, prior to this issue, I don't think it mattered which solution I chose.