BPF and Security Roles

[MikeBlairTP]

In my model driven app, I have created a BPF for users to submit their data.  The BPF shows for admins but not for the basic users.  This is clearly a security role issue.  I have updated the roles on the BPF

 

This made now difference, do I need to make a change on the table for the basic user role?

 Example of missing BPF

[ShaheerAhmad · Accepted solution]

If the Business Process Flow (BPF) is not visible for basic users in your model-driven app despite updating the security roles, there are a few things you can check and adjust:

1. Verify Security Roles: Ensure that the basic user role has the necessary privileges and access levels to view and interact with the BPF. Make sure the following privileges are granted to the basic user role:

   • Business Process Flows: Read privilege on the BPF entity.
   • Entity privileges: Create, Read, Write, and Append To privileges on the entity that the BPF is associated with.
   • Field privileges: Read and Write privileges on the fields used in the BPF.

2. Check Field Security Profiles: If you have enabled Field Security on the entity and the fields used in the BPF, ensure that the basic user role has the necessary Field Security Profiles assigned with appropriate privileges.

3. Validate Entity Permissions: Confirm that the basic user role has appropriate permissions to access and perform actions on the entity that the BPF is associated with. Check the entity's security roles to ensure that the basic user role has the required permissions.

4. Publish Customizations: After making changes to the security roles or entity permissions, remember to publish the customizations for the changes to take effect in the app.

If you have verified and adjusted the security roles and entity permissions but the BPF is still not visible for basic users, it would be worth checking the entity's form(s) as well. Ensure that the BPF control is added to the form and is visible for the basic user role. You can edit the form and check the control properties to confirm its visibility settings.

If the issue persists, you may need to investigate further or seek assistance from your system administrator or a Dynamics 365 support team to troubleshoot the specific configuration and permissions in your app.

[LinnZawWin]

If you added the privilege to the security role that the basic users have, you don't need to make a change in another role (Basic User Role) anymore. Having the privilege in one of the roles that the user have is good enough since the security role privileges are cumulative.

In my opinion, you still need to provide "Read" privilege to the Process table at the Organization level because the user needs to have access to the definition of the BPF definition created/owned by the admin. By default, the Basic User Role only has User level "Read" privilege to the Process table.

[MikeBlairTP]

After granting access to the table for the BPF from Create to Append to and a hard browser refresh, it's working.

[MikeBlairTP]

Thanks for this, I checked the above and this was enable for the user at the user level across the entity.

[LinnZawWin]

Oh, just saw the reply that it is finally working. Great... 👍

[Sudhir_Ditech]

Hi, @ShaheerAhmad. say if there is BPF where multiple users have to approve/reject/comment on various stages of the same BPF, how do we define the security for users who have to interact with same BPF? because we have defined the Security roles and column security as well, however; the user cannot interact with the BPF as we intended below.

• User needs to login, say to view all records/fields/dashboard.
• He would interact with the BPF (Approve/Reject/Comment), but for only one of the stages (Initiation, Planning, Execution, Monitoring and Closeout) in the BPF.
• Also, there might be other users who will interact with the same BPF but on other stages of BPF