<turbo-stream action="update" target="wiki_card"><template>

<h1>Error 0x80040216: Permission Denied</h1>
<div class="trix-content"><div><strong>Error Message</strong>: "The user does not have sufficient permissions".<br><strong>What it means</strong>: The integration user lacks the necessary permissions to perform the requested operation in Dynamics 365.<br><br></div><div><figure class="attachment attachment--content"><table class="table table-bordered"><thead><tr><td>Scenario</td><td>Error Example</td><td>Cause</td><td>Quick Fix</td></tr></thead><tbody><tr><td>Missing CRUD Privilege</td><td>Principal user is missing prvCreateAccount privilege</td><td>User doesn't have Create permission on Account entity</td><td>Assign security role with Create privilege at appropriate depth</td></tr><tr><td>Insufficient Privilege Depth</td><td>Missing prvReadContact privilege (Required Depth=Global)</td><td>User has Read but only at User/BU level, not Organization level</td><td>Change privilege depth to Organization in security role</td></tr><tr><td>Field-Level Security</td><td>User does not have read permissions to a SSN secured field</td><td>Field has FLS enabled, user lacks field security profile</td><td>Assign field security profile to user</td></tr><tr><td>Business Unit Access</td><td>User does not have access to specified Business Unit</td><td>User cannot access records in different BU</td><td>Move user to root BU or increase role depth to Organization</td></tr><tr><td>Application User Not Configured</td><td>User does not have sufficient permissions (Application User)</td><td>Application user created but no security role assigned</td><td>Assign security role to application user</td></tr></tbody></table><figcaption class="attachment__caption"></figcaption></figure></div><div><strong>How to Fix<br></strong><br></div><div><strong>Step 1: Identify What's Missing<br></strong><br></div><div>Check the error message for:<br><br></div><ul><li>Which privilege: prvCreate, prvRead, prvWrite, prvDelete, prvAppend, prvAssign.</li><li>Which entity: Account, Contact, custom entity.</li><li>SystemUserId: User GUID from error message.</li><li>Required depth: User, Business Unit, or Organization.</li></ul><div><strong>Step 2: Assign Security Role<br></strong><br></div><div>In Dynamics 365:<br><br></div><ul><li>Settings &gt; Security &gt; Users.</li><li>Find user by SystemUserId from error.</li><li>Click "Manage Roles".</li><li>Assign appropriate role OR create custom role.</li></ul><div>Recommended Integration Role Privileges:<br><br></div><ul><li>Entity: Account, Contact, Lead, Opportunity, Quote, Order, Product.</li><li>Privileges: Create, Read, Write, Delete, Append, AppendTo, Assign.</li><li>Depth: Organization (for all records across all BUs).</li></ul><div><strong>Step 3: Fix Field-Level Security (If Needed)<br></strong><br></div><ul><li>Settings &gt; Security &gt; Field Security Profiles.</li><li>Create "Rapidi Integration Profile".</li><li>Add secured fields with Read, Update, Create permissions.</li><li>Assign profile to integration user.</li></ul><div><strong>Step 4: Fix Business Unit Access (If Needed)<br></strong><br></div><div>Option A: Move user to root business unit.<br><br></div><div>Option B: Change role privilege depth from "Business Unit" to "Organization".<br><br></div><div><br></div></div>
</template></turbo-stream>

