The following table shows the default security roles Defined sets of privileges.The security role assigned to a user determines which tasks the user can perform and which parts of the user interface the user can view. All users must be assigned at least one security role in order to access the system. required to perform each task, and whether the task can be performed while using the Microsoft Dynamics CRM Online for Outlook offline. Some tasks require special privileges A user's rights to perform specific actions on specific record types or to perform tasks. Privileges are assigned by system administrators to security roles. Users are then assigned security roles. Examples of privileges include Update Account and Publish Customizations..
Tasks Related to Auditing
Default Security Roles and Required Privileges
Can Task Be Done Offline?
Enable or disable auditing for organization
Security roles: System Administrator
Privileges:
Organization: Read A privilege required to read a record. Which records can be read depends on the access level of the permission defined in your security role., Write A privilege required to make changes to a record. Which records can be changed depends on the access level of the permission defined in your security role.
No
Enable or disable auditing for entities
Security roles: System Administrator and System Customizer
Privileges:
Entity: Read A privilege required to read a record. Which records can be read depends on the access level of the permission defined in your security role., Write A privilege required to make changes to a record. Which records can be changed depends on the access level of the permission defined in your security role.
No
Enable or disable auditing for fields
Security roles: System Administrator and System Customizer
Privileges:
Field: Read A privilege required to read a record. Which records can be read depends on the access level of the permission defined in your security role., Write A privilege required to make changes to a record. Which records can be changed depends on the access level of the permission defined in your security role.
No
Deleting audit logs
Security roles: System Administrator
Privileges: View Audit Partitions A privilege that is required to view the audit partitions. This privilege is on the Core Records tab in Security Roles.
Delete Audit Partitions A privilege that is required to delete the audit partitions. An audit partition contains audit logs of Microsoft Dynamics CRM Online data for three months. This privilege is on the Core Records tab in Security Roles.
No
View audit summary
Security roles: System Administrator
Privileges: View Audit Summary A privilege that is required to the view audit summary of records. This privilege is on the Core Records tab in Security Roles.
No
View audit history of individual records
Security roles:
CEO-Business Manager
Customer Service Manager
Marketing Manager
Sales Manager
Vice President of Marketing
Vice President of Sales
System Administrator
Privileges:
View Audit History A privilege that is required to view the audit history of individual records. This privilege is on the Core Records tab in Security Roles. and Read A privilege required to read a record. Which records can be read depends on the access level of the permission defined in your security role. privilege on the record.