I have an issue I have been battling this issue, I have deployed a plugin assembly in the CRM environment that triggers on update of the opportunity. Tested this plugin as user and it updated just fine on save of opportunity using a system admin role.
Then after deployment of the plugin, the normal users (e.g. sales person) received and insufficient error log below
Error Code:
Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: Principal user (Id=cdd141f1-1066-e211-af80-005056a14e37, type=8) is missing prvWriteUser privilege (Id=dbb088d1-c7b7-40e7-8728-fdedb539319c)Detail:
<OrganizationServiceFault xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/xrm/2011/Contracts">
<ErrorCode>-2147220960</ErrorCode>
<ErrorDetails xmlns:d2p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic" />
<Message>Principal user (Id=cdd141f1-1066-e211-af80-005056a14e37, type=8) is missing prvWriteUser privilege (Id=dbb088d1-c7b7-40e7-8728-fdedb539319c)</Message>
<Timestamp>2015-08-24T08:50:10.5527812Z</Timestamp>
<InnerFault i:nil="true" />
<TraceText>
[FinalUpdateUserOnOpportunityCount: FinalUpdateUserOnOpportunityCount.UpdateOpportunity]
[fc2a2462-384a-e511-a965-005056a16449: FinalUpdateUserOnOpportunityCount.UpdateOpportunity: Update of opportunity]
I copied a security role gave this role the business unit access level on read of users in the Business Management Tab (Security roles) and again gave the Business unit access "to the approve Email addresses for users and queues”, then I assigned 4 people this role, this role is working on 3 of the people meaning they can save opportunities without any error coming up from my plug in, but it is not working on the 4th user , still gets the "insufficient role " error as above. I then gave this user the same Bu as the above 3 the same error still throws ,tried to give this user organisation level access to enable business unit access to the to “ users “ on the Business Management tab, give write and read access to Plugin Assembly usage(access is organisational level), give Organisational level access to "to the approve Email addresses for users and queues" and users in the Business Management tab still the same error still throws only for this specific user, the user tried logging on from a different PC ,same error still throws though.
I have the read access on organisation level for Plugin Assembly and Plugin Type, have the system job, view enabled on organisation access as well have no idea what the issue is worth this user.
Why they still cannot access the update of opportunity, even after the new role is assigned.
Can anyone please assist.
Thanks.