A user whose security role does not have ANY privilege on User entity is trying to distribute a Campaign Activity of Channel type “Appointment”. This distribution operation by CRM Asyn Service
is failing to create records with error “The Signed-in user does not have appropriate security permission to view these records or do specific action”. The records appears under Failures in Campaign Activity. Below Is the CRM trace.
Crm Exception: Message: Principal user (Id=--, type=8)
is missing prvReadUser privilege (Id=--), ErrorCode: -2147220960
[2013-03-21 07:43:59.597] Process:CrmAsyncService |Organization:-- |Thread: 5 |Category: Platform |User: -- |Level: Error |ReqId: -- | RuntimeMethodHandle._InvokeMethodFast ilOffset = 0xFFFFFFFF
>Exception when trying to create record for BulkOperationid{--}, entityid {--}, exception : Microsoft.Crm.CrmSecurityException: Principal user (Id=--, type=8) is missing prvReadUser privilege (--)
We are able to save the record by creating an appointment directly (Not from Campaign activity distribution feature), by clearing the “Organizer” filed using Java script on “Appointment” form load.
But when we distribute “Appointments” from Campaign Activity, the CRM Async is trying to access the system User to block the user Calendar and failing due insufficient privileges for user.
We have created a plug-in to set the Organizer field to null . We registered the plug-in on Create, Book messages on all available stages (Pre-validation, Pre-Operation, Post-Operation). But none of messages are getting fired when CRM Async service is creating these “Appointments”.