In Dynamics CRM we have three types of User Subscription Licenses (USLs); Professional, Basic, and Essential
Note - A fourth USL (Enterprise) is available. Its equivalent to Professional plus Dynamics Marketing, Social Care (specific markets) and Unified Service Desk.
Each of the above licenses has a different price point; if Professional is 4X then Basic is approximately 2X, and Essential is X. Hence its often of interest to the customer to 'get the right mix' between Professional and Basic users, ending up with the optimal average price point.
The Basic user has full access to eg the Account, Contact, Lead, and Case entitites, but have read only/limited use rights to certain entities, eg. Opportunities. Using the Security Role settings in Dynamics CRM you can control what a user can access. Hence mapping the two - the Use Rights of the Basic user to the available Security Role settings - is interesting.
Use Rights for the Basic USL
Appendix A in the "Licensing and Pricing Guide, June 2014" maps CRM Online Use Rights to the Pro, Basic and Essential USL's.
Security Roles
A security role in Dynamics CRM defines how different users, such as salespeople, access different types of records. To control access to data, you can modify existing security roles, create new security roles, or change which security roles are assigned to each user. Each user can have multiple security roles.
To access the security roles click Settings -> Administration -> Security Roles
In the "New Security Role" dialog you can control what a user with that new role can do in CRM using the various tabs and settings (priveleges and scope) in the dialog.
The tabs are
The access right/priveleges are
The scopes are
Mapping Use Rights to Security Role settings for the Basic USL
In the table below I've taken the first steps trying to map the Basic USL to CRM Security Role settings. Please note: the below table is a my personal suggestion and by no means authoritive.
The tab has six columns:
Appendix A: Subject
Basic
Focus
USL
Security Tab
Security: Setting(s) - suggested
Accounts
1
Core
Account
Activity Management
Activities
Activity
Add or remove a Customer for an Account
Customer Relationship
Add or remove a Customer Relationship for a Contact
Advanced Find Search
Search
Associate an Opportunity with a Contact
Contacts
Full
Opportunity = Append, Contact = Append To
Associate an Opporturity with an Account
Opportunity = Append, Account = Append To
Case Management
Cases
Service
Case
Contact
Convert an Activity to a Case
Case = (Create)
Create and Update Announcements
Announcements
Announcement
Create personal views
Views - Personal
Customization
View = (Create)
Create, Update, Customize Reports
Reports
Report
Export data to Microsoft ExceI
Data - Export
Business Management
Export to Excel
Follow Activity Feeds
Follow
Lead Capture
Leads
Lead
Lead scoring, routing and assignment
Manage Saved Views
Views - Saved
Saved Views
Manage user reports, user charts, and user dashboards
Reports, Charts, Dashboards - User
Report, User Chart, User Dashboard
Microsoft CRM for Outlook
Client UI
Sync to Outlook, Go Offline in Outlook
Microsoft CRM Web application
Microsoft Dynamics CRM for iPad & Windows 8
Use CRM for Tablets
Microsoft Dynamics CRM Mobile Express
Notes
Note
Perform Mail Merge
Mail Merge
Mail Merge, Web Mail Merge, (Core:Mail Merge Template)
Post Activity Feeds
Post
Qualify and Convert a Lead to a Contact
At least WRITE on Lead as well as CREATE & WRITE on Contact
Qualify and Covert a Lead to an Account
At least WRITE on Lead as well as CREATE & WRITE on Account
Read Articles
Articles
Article = (Read)
Read Custom Application Data
Data - Custom
Customization:User Application Metadata
Read Dynamics CRM Application Data
Data - CRM Application
Read
Core:Application File,Customization:System Application Metadata
Run an automated workflow
Workflows - Automated
Execute Workflow Job
Run as an On-demand Process
Processes (Workflows)
Process, Execute Workflow Job
Run Reports
Shared Calendar
Calendar - Shared
Service Management
Calendar
SLAs
SLA
Start Dialog
Dialogs
Use a Queue item
Queues
Queue:Write
Use Relationships between Records
Relationships
Relationship Role
User Charts
Charts - User
User Chart
User Dashboards
Dashboard - User
User Dashboard
User Interface Integration for Microsoft Dynamics CRM
View Announcements
Write Custom Entity Records
Entities - Custom
Entity = (Write)
Yammer Collaboration
Yammer
Customization:Configure Yammer
Administer CRM
0
CRM
Article Templates
Articles - Templates
Article Templates = No
Competitor Tracking
Competitors
Sales
Competitor = Read
Configure Auditing
Auditing
Delete Audit Partitions = No, View Audit History, View Audit Partitions, View Audit Summary
Configure Duplicate-Detection Rules
Duplicate-detection rules
Duplicated Detection Rule = No
Configure SLA Policies
SLA Policies
?
Contract Management
Contracts
Contract = (Read)
Contract Templates
Contracts - Templates
Contract Template = No
Convert an Activity to an Opporturity
Opportunities
Opportunities = (Read)
Create and Publish Articles
Create = No, Publish Articles = No
Create CRM Forms, Entities, Fields
Forms, entities, fields
Entity = (NOT Create), Field = (NOT Create)
Customize Forms and Views
Forms, Views
System Form = No
Define and Configure Business Units
Business Units
Business Unit = No, Enable or Disable a Business Unit, Reparent Business Unit
Define and Configure Dialogs
Activate Real-time Processes = No, Activate Business Rules = No
Define and Configure Queues
Queue/Create = No
Define and Configure Workflows
Workflows
Activate Business Process Flows = No, Activate Real-time Processes = No, Activate Business Rules = No
Define and Configure Services, Resources, and Work Hours
Services, Resources, and Work Hours
Define and Configure Teams
Teams
Team = No
Define Relationships Entities
Core?
Relationship Role, Opportunity Relationship, Customer Relationship
Facility/Equipment Management
Facilities, Equipment
Facility/Equipment = No
Goal Management
Goals
Goal = No, Goal Metric = No, Perform in sync rollups on goals = No
Import Data in Bulk
Data - import - Bulk
Data Import = No
Invoice Management
Invoices
Invoice = No, Override Invoice Pricing = No, Override Quote Order Invoice Delete = No
Marketing Campaigns
Marketing campaigns
Marketing
Campaign = No, Create Quick Campaign = No
Marketing Lists
Marketing lists
Marketing List = No
Opporturity Tracking
Opportunities = Read
Order Management
Orders
Order = No (or Read)
Price Lists
Price lists
Service?
Product Tracking
Products
Product
Qualify and Convert a Lead to an Opporturity
Quick Campaigns
Quick campaigns
Create Quick Campaign = No
Quote Management
Quotes
Quote = (Read)
Sales literature
Sales literature = No
System Reports, System Charts, System Dashboards
Reports, Charts, Dashboards - System
System Chart = No
Territory management
Territories
Territory = No (Business Management:Assign Territory to User)
See also
thank you
Is these different user rights and Price points also applicabel to CRM on prem?
http://download.microsoft.com/download/3/E/5/3E5F721D-69F4-4398-9E25-A47F81777031/MicrosoftDynamicsCRM2013On-PremisesLicensingGuide(CustomerReady).pdf
Thank you very much Jesper.
Really useful post jesper, but i thought the Enterprise licence was available outside of the US as well?
Thank you
Thanks Jesper. A (maybe dumb) question, if access is NOT restricted by security roles, could a basic user theoretically use all the functionality? in other words, access is not restricted inherently by the USL?
If I were to purchase ESS CALs, would they show up as an option in the user License Type drop down? I only see Full and Limited as options.