Control Access to the Resource Center
The Resource Center contains information that is designed to help you get the most from your implementation of Microsoft Dynamics CRM 2011. However, you may want to control access to the Resource Center for some users..
This topic describes how you can control access to all or part of the Resource Center by using the same methods that can be used to customize the Navigation Pane areas of Microsoft Dynamics CRM.
Use the Privilege element to control access to Navigation Pane areas
<SiteMap> <Area Id="MA"> <!-- Marketing Area --> <Group Id="MA"> <SubArea Id="nav_leads" Entity="lead"/> <!-- Displays Leads Grid --> <SubArea Id="nav_accts" Entity="account"/> <!-- Displays Accounts Grid --> <SubArea Id="nav_conts" Entity="contact"/> <!-- Displays Contacts Grid --> <SubArea Id="nav_lists" Entity="list"/> <!-- Displays Marketing Lists Grid --> </Group> </Area> <Area Id="CS"> <!-- Service Area --> <Group Id="CS"> <SubArea Id="nav_cases" Entity="incident"/> <!-- Displays Cases Grid --> <SubArea Id="nav_accts" Entity="account" /> <!-- Displays Accounts Grid --> <SubArea Id="nav_contacts" Entity="contact"/> <!-- Displays Contacts Grid --> <SubArea Id="nav_managekb" Url="/_root/homepage.aspx?etc=127"> <!-- Displays Manage KB page --> <Privilege Entity="kbarticle" Privilege="Read,Write,Create"/> </SubArea> </Group> </Area> </SiteMap>
Each <SubArea> (SiteMap) element provides navigation to a grid view for a particular entity or a specific page defined by a URL.
For those <SubArea> (SiteMap) elements that define an entity grid view, the entity grid will only be displayed when the security role for a user includes the read privilege for that entity
However, notice that one of these <SubArea> (SiteMap) elements has a URL defined rather than the name of a specific entity. The following XML shows that access to the
/_root/homepage.aspx?etc=127 page is controlled using the <Privilege> (SiteMap) element.
<SubArea Id="nav_managekb" Url="/_root/homepage.aspx?etc=127"> <!-- Displays Manage KB page --> <Privilege Entity="kbarticle" Privilege="Read,Write,Create"/> </SubArea>
In this case, the optional <Privilege> (SiteMap) element defines that only users with Read, Write, and Create privileges for the kbarticle entity will be able to view the Manage KB articles page located at
/_root/homepage.aspx?etc=127. If this <SubArea> (SiteMap) element were included without the <Privilege> (SiteMap) element, all users would be able to access the page.
|If a user is not allowed to view any of the subareas within an area, that area will not appear in the Navigation Pane for that user.|
The most obvious way to remove a <SubArea> (SiteMap) from the navigation is to delete it. However, we recommend that you comment out any SubAreas that you do not want to display rather than delete the element. This makes it easier to recover in the future.
For more precise control over access to a SubArea, use privileges. For more information, see Privileges by Entity. In most cases, associating access to a privilege associated with an entity is sufficient. See Privileges Not Associated with an Entity for additional privileges you can use. In this case, you should remove the “prv” prefix to the privilege name when you use it.
Example: Show the Resource Center to Administrators only
You can modify the default definition of the Resource Center in the Site Map to limit access to only those users who have specific privileges. The following XML shows the default definition for the Resource Center <Area> (SiteMap).
<Area Id="ResourceCenter" ResourceId="Area_ResourceCenter" Icon="/_imgs/resourcecenter_24x24.gif" DescriptionResourceId="ResourceCenter_Area_Description"> <Group Id="ResourceCenter"> <SubArea Id="nav_lc_overview" ResourceId="Homepage_LearningOverview" DescriptionResourceId="LearningOverview_SubArea_Description" Icon="/_imgs/ico_18_129.gif" Url="/resourcecenter/overview.aspx" AvailableOffline="false" /> <SubArea Id="nav_lc_customization" ResourceId="Homepage_LearningCustomization" DescriptionResourceId="LearningCustomization_SubArea_Description" Icon="/_imgs/area/18_settings.gif" Url="/resourcecenter/customization.aspx" AvailableOffline="false"> <Privilege Privilege="CreateEntity" /> <Privilege Entity="solution" Privilege="Create" /> <Privilege Privilege="ImportCustomization" /> </SubArea> </Group> </Area>
You can see how the Administration node of the Resource Center is restricted to only those with a set of privileges assigned to administrators. To remove access to people who are not administrators, you can comment out the <SubArea> (SiteMap) with Id
nav_lc_overview and leave only the Administration area available to administrators. Non-administrators will have no access to any of the SubAreas in the Resource Center. Therefore, the Resource Center area will not be displayed to them in the application.
Microsoft Dynamics CRM 2011
Send comments about this topic to Microsoft.
© 2013 Microsoft Corporation. All rights reserved.