So, in my infinite wisdom I decided to try and resolve an issue (Working on 2 issues at a time, important point.)
First issue: I noticed that one of our CRM services wasn’t actually using one of our production service accounts, no issue at all. Quick fix and a service restart. (ProTip 2: Don’t do this during production hours. Do as I say not as I do). Never an issue. Not actually sure who configured this the first time around, but stuff happens.
The second issue, I was trying to resolve a stupid issue regarding a CRM user account (See where this is going?). Cool, open CRM, settings, administration, add user, save. This is where my heart rate jumped 100BPM.
In my infinity wisdom, I copied the service account into the username, let it populate then hit save.
INSUFFICIENT PERMISSIONS. Contact an administrator.
[Lots of swearwords]+[Panic attack]+[Emotional breakdown as I don’t want to do any sort of restoration during production hours]
O WAIT, I R ADMIN AND KNOW CRM DATABASE. THIS COULD BE WORSE.
Run the following scripts (Taken from: https://markuserlandsson.wordpress.com/2014/10/02/adding-dynamics-crm-service-account-as-a-crm-user/ ) – With a modification
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 |
delete from usersettingsbase where SystemUserId = 'SystemUserGuid' delete from TeamMembership where SystemUserId = 'SystemUserGuid' delete from SystemUserPrincipals where SystemUserId = 'SystemUserGuid' delete from PrincipalObjectAccess where PrincipalId = 'SystemUserGuid' delete from QueueBase where OwnerId = 'SystemUserGuid' delete from ResourceBase where ResourceId = 'SystemUserGuid' delete from InternalAddressBase where ParentId = 'SystemUserGuid' delete RB from CalendarRuleBase RB INNER JOIN CalendarBase B on B.CalendarId = RB.CalendarId where PrimaryUserId = 'SystemUserGuid' delete from CalendarBase where PrimaryUserId = 'SystemUserGuid' delete from OwnerBase where OwnerId = 'SystemUserGuid' delete from dbo.SystemUserExtensionBase where SystemUserId = 'SystemUserGuid' delete from SystemUserBase where SystemUserId = 'SystemUserGuid' delete from MSCRM_CONFIG..SystemUserOrganizations where CrmUserId = 'SystemUserGuid' |
Note: This SQL will error regarding table references, delete from said tables too.
Restart services / Reboot as required.
ProTip: ONE TASK AT A TIME.
ProTip 2: DON’T ADD SERVICE ACCOUNTS AS USERS UNLESS YOU WANT TO BE LOCKED OUT OF ALL PERMISSIONS.
ProTip 3: BREATHE.