Does the user (used in the connection) need to have a system administrator role?
Yes. When using eOne SmartConnect to connect with Microsoft Dynamics CRM (on-premise)—especially via IFD (Internet-Facing Deployment) or AD (Active Directory)—the connector account configured in SmartConnect must be granted the System Administrator security role within CRM.
Purpose of the Connector Account in SmartConnect:
This account is used by SmartConnect to:
- Authenticate with the CRM Discovery Service
- Retrieve metadata and available CRM organizations
- Access the entity schema and field definitions
- Execute read/write operations during data integrations
Why “System Administrator” Role required?
- Discovery Service Access:
SmartConnect uses the CRM Discovery Service to list available CRM organizations during connector setup. Without the System Administrator role, the account may not have visibility to all organizations or might encounter access errors. - Entity and Metadata Access:
SmartConnect retrieves all CRM metadata (entities, fields, lookups, etc.) to build maps and validate data structures. These actions require full privileges, which are only guaranteed by the System Administrator role. - Integration Map Execution:
During runtime, SmartConnect may create, update, or delete CRM records depending on the map configuration. The account must have unrestricted access to perform these operations across all entities and business units. - Avoiding Security Errors:
Without full permissions, SmartConnect may encounter errors like:- “Access Denied”
- “Insufficient Permissions”
- “Organization not found.”
- “Entity does not exist, or the user does not have access”.
For Example:
Have a question? Please reach out to us at support@eonesolutions.com
