System Admin Role Still getting Read/Write Privilege Errors

[Andrew_Gua]

Hello,

I am assigned System Admin for a variety of Power Apps Environments for testing and development. Whenever I am trying to import data from an excel I am getting error messages. The System Admin Role is not one that is inherited from a Team, it is one that is applied to my user specifically for these environments. The error I am getting is the following-

Reason: Bad Request, Header x-ms-client-request-id 10bfbb6f-2274-4307-8723-42139de40e27, Error code: 0x80040299, Message: Principal team (Id=8acb3dcf-4c1d-e911-a99c-000d3a33a6a9, type=9, teamType=0, privilegeCount=190), is missing prvReadcre7e_ExamplePickedPart privilege (Id=76aea819-a7f5-4ee6-a349-71ebdeb23d81) on OTC=10226 for entity 'cre7e_examplepickedpart'. context.Caller=9dd96540-991f-e911-a99d-000d3a37051a

I can see that the message is stating that I need to assign read privileges. I have also read the other posts on the forum here that are related to this issue, one of which stated that having Sys Admin role should resolve this issue.

Do I need to create a brand new security role and edit it to allow read/write for every new custom column I create?

[dpoggemann]

Hi @Andrew_Gua,

When you are creating the records in the dataverse from the Excel file, are you doing this through a Power Automate flow, through Excel import, data flow?

1.  Do you have a field level security profile in place for the ExamplePickedPart field?

2.  Are you assigning the ownership of the record to a Team? Does this team have a security role assigned for the PartPicker entity?

You do not need to have different roles for the fields on the entity but just checking to see if field level security could be causing your challenge here...

I can hopefully help more if you can answer these questions.   

Thanks,

Drew

[Andrew_Gua]

I'm running into this issue when I select my Table then Get Data > Get Data from Excel. I upload my excel data (which is a modified file that I created from the template export of this same table) and after I get Mapping status to read "mapping was successful" I map columns and set some of the columns I am not requiring to "None".

Then I try to Import and get this repeating error for every entry that I added to the excel sheet.

I have not assigned any security profiles for any fields, I have not assigned any ownership. I have only done the following- Opened an environment where I am system admin, made a new table, added some custom columns, created some relationships, saved my table, exported the data, opened the exported template and added data appropriate for my column types, attempted to import this data.

[Fubar]

One thing you could do is find the team with the id (internal guid) = 8acb3dcf-4c1d-e911-a99c-000d3a33a6a9

In a model driven app, use advanced find and just export all the Teams to excel, then unhide the first 3 columns and look for the id in the first column

Alternatively use XrmToolBox to query the Teams entity for that Id - then see what Security Roles and permissions if any the Team has.

[Andrew_Gua]

I have looked into this some more and the Team referenced in the error message is a Microsoft Project Team that is also on this environment.

I am not a part of this Team, so it is very odd that this error is surfacing when I am trying to do things with Dataverse. Does Microsoft Project automatically associate itself as the "Principal Team" for every table in the environment when it is created? This was never something that was manually assigned. No Teams have been assigned by me or anyone else to the table that is giving me this error, yet some association seems to have already been made in the background.

[dpoggemann]

Hi @Andrew_Gua 

You mentioned "Microsoft Project", assume you mean Dataverse?  What are you setting the Owner field value in the data you are importing from Excel?  If you are setting to a team name then you need  If so, you will need to make sure this team has a role assigned that has security for this custom table you added. 

A good initial test would be to set the owner field to yourself and verify it works.

Hope this helps.  Please accept if answers your question or Like if helps in some way.

Thanks,

Drew 

Note, 

[Fubar · Accepted solution]

It depends on exactly when the error is being triggered, e.g. is it just before the import starts (something to do with your user or the environment), or the import has started (could also be workflow/plugin related)?

It is possible that the create/update is triggering a Plugin or realtime Workflow that is running as the Owner of the record (and the owner is set to that Team) and the plugin/workflow needs read access to that table but the Team doesn't have it.

Quick fix (but not a long term solution), is obviously to assign permissions to that Team and see if the error goes away.

[Andrew_Gua]

This environment is just a basic environment with a database. The only thing that has been done on it so far is to create a team and now I am trying to generate a custom table and populate it with data from excel.

I added the System Admin role to the team referenced in the error it does resolve this error.

But why does the Team need System Admin role when I myself as a user am a system admin? Why is the team even being brought into this attempt to update the table?