Query in Excel and user rights

Hi,

With the Microsoft Query wizard in Excel a user can make a connection with
the CRM database. With this wizard you can write to the database. A user with
the role sales can see only the filtered views but is that user allowed to
write to the database?

Thanks
Jan

MichaelCross
Thu Mar 29 08:30:02 CDT 2007

Jan,

The filtered views are set up specifically to prevent users from writing to
the database. So in your case, the user will not be able to write to the
database.

Mike Cross
http://www.navint.com


"JN" wrote:

>
> Hi,
>
> With the Microsoft Query wizard in Excel a user can make a connection with
> the CRM database. With this wizard you can write to the database. A user with
> the role sales can see only the filtered views but is that user allowed to
> write to the database?
>
> Thanks
> Jan

JN
Thu Mar 29 08:42:03 CDT 2007

Hi Michael,

Thank you for your answer. So even a CRM-user with the role system
administrator cannot write to the database. Only a SQL server administrator
can.

Regards,
Jan

"Michael Cross" wrote:

> Jan,
>
> The filtered views are set up specifically to prevent users from writing to
> the database. So in your case, the user will not be able to write to the
> database.
>
> Mike Cross
> http://www.navint.com
>
>
> "JN" wrote:
>
> >
> > Hi,
> >
> > With the Microsoft Query wizard in Excel a user can make a connection with
> > the CRM database. With this wizard you can write to the database. A user with
> > the role sales can see only the filtered views but is that user allowed to
> > write to the database?
> >
> > Thanks
> > Jan

MichaelCross
Thu Mar 29 08:50:00 CDT 2007

Jan,

If the user is using the filtered views, then NOBODY can write to the
database via the views. The views do not have write privilege.

This is why Microsoft created those views, and why best practice is to
access the data using ONLY those views.

Mike Cross
http://www.navint.com


"JN" wrote:

> Hi Michael,
>
> Thank you for your answer. So even a CRM-user with the role system
> administrator cannot write to the database. Only a SQL server administrator
> can.
>
> Regards,
> Jan
>
> "Michael Cross" wrote:
>
> > Jan,
> >
> > The filtered views are set up specifically to prevent users from writing to
> > the database. So in your case, the user will not be able to write to the
> > database.
> >
> > Mike Cross
> > http://www.navint.com
> >
> >
> > "JN" wrote:
> >
> > >
> > > Hi,
> > >
> > > With the Microsoft Query wizard in Excel a user can make a connection with
> > > the CRM database. With this wizard you can write to the database. A user with
> > > the role sales can see only the filtered views but is that user allowed to
> > > write to the database?
> > >
> > > Thanks
> > > Jan

DavidJennaway
Thu Mar 29 09:34:02 CDT 2007

Thatis right. CRM users can access the MSCRM SQL database through membership
of the AD group ReportingGroup; the only permissions this group (or user in
SQL terms) has in MSCRM database is Select permission on the filtered views

"JN" wrote:

> Hi Michael,
>
> Thank you for your answer. So even a CRM-user with the role system
> administrator cannot write to the database. Only a SQL server administrator
> can.
>
> Regards,
> Jan
>
> "Michael Cross" wrote:
>
> > Jan,
> >
> > The filtered views are set up specifically to prevent users from writing to
> > the database. So in your case, the user will not be able to write to the
> > database.
> >
> > Mike Cross
> > http://www.navint.com
> >
> >
> > "JN" wrote:
> >
> > >
> > > Hi,
> > >
> > > With the Microsoft Query wizard in Excel a user can make a connection with
> > > the CRM database. With this wizard you can write to the database. A user with
> > > the role sales can see only the filtered views but is that user allowed to
> > > write to the database?
> > >
> > > Thanks
> > > Jan

JN
Tue Apr 10 09:02:01 CDT 2007

Hi Michael,

Today I tested whith a CRM administrator who is also a domain administrator
but I was able to write to the CRM database!? I used filtered views.

Regards,
Jan
"Michael Cross" wrote:

> Jan,
>
> If the user is using the filtered views, then NOBODY can write to the
> database via the views. The views do not have write privilege.
>
> This is why Microsoft created those views, and why best practice is to
> access the data using ONLY those views.
>
> Mike Cross
> http://www.navint.com
>
>
> "JN" wrote:
>
> > Hi Michael,
> >
> > Thank you for your answer. So even a CRM-user with the role system
> > administrator cannot write to the database. Only a SQL server administrator
> > can.
> >
> > Regards,
> > Jan
> >
> > "Michael Cross" wrote:
> >
> > > Jan,
> > >
> > > The filtered views are set up specifically to prevent users from writing to
> > > the database. So in your case, the user will not be able to write to the
> > > database.
> > >
> > > Mike Cross
> > > http://www.navint.com
> > >
> > >
> > > "JN" wrote:
> > >
> > > >
> > > > Hi,
> > > >
> > > > With the Microsoft Query wizard in Excel a user can make a connection with
> > > > the CRM database. With this wizard you can write to the database. A user with
> > > > the role sales can see only the filtered views but is that user allowed to
> > > > write to the database?
> > > >
> > > > Thanks
> > > > Jan