Dynamics CRM is designed by default to be an open and collaborative system.  However, there is always a need to restrict access to certain kinds of data depending on the user hierarchy and/or role in any organization.  Luckily, CRM provides various security tools to get the job done; all you have to do is finalize the right mix of access and performance.

Avoid “security through obscurity”

A key theme when designing the CRM security model is to avoid the practice of security through obscurity.  A simple example of this would be to hide access to certain records in the Views, but not consider that users may have access to restricted records elsewhere, like in Advanced Find.  Users don’t need the Force to quickly discover loopholes in your model.

Always consider all the ramifications of adding customized access when addressing security needs that may fall outside of the default security configurations in Dynamics CRM.  If there are known limitations in your design, be sure to clearly communicate them to stakeholders and highlight them in your documentation.  Ideally, stakeholders may be open to adapting security requirements according to Dynamics CRM best practices.

Suss out all security requirements as early as possible

During the process of requirements gathering, it’s important that all security concerns should be surfaced and documented as early as possible in the SDLC.  It may also be helpful to finalize reporting needs early on, since it would generally require a workable security model to display the right data according to user needs.

Introducing any changes to the security design of Dynamics CRM in a later stage of the project can guarantee a huge impact your delivery plan and budget.  Avoid being a target for that managerial force choke!

Sample scenarios to help choose the right tool for your security model

As a rule of thumb, you can use the below scenarios to help determine the right security tool in CRM to use.

“I want our general users to have limited permissions to records, but give manager users more elevated permissions to the same records.”

Create separate Security Roles in CRM according to different user roles, which should help address this requirement.

“I want managers to view all the records owned by their direct employees, but not see records belonging to other managers and/or departments”

Luckily we have several options here.  Each has its pros and cons, but all are generally safe options to address this scenario.

• A combination of Business Units and Security Roles can provide this setup.  If managers and their users belong to their own separate business units (e.g. separated by departments), then they can be configured to have business unit access to records.
• A new feature in CRM 2015 called Hierarchy can be used.  There are two type of hierarchy configurations available: Managerial, and Positional.  More documentation about this feature can be found here.  The right configuration will largely depend on the organization’s hierarchy setup and needs.  It’s important to note that hierarchy should be used in limited circumstances to prevent potential issues with performance, particularly systems with large userbases.
• Last but not least, a combination of Business Units, Security Roles and Hierarchy may be what is needed to address more complex cases.

“I don’t want users to see CRM records originating from this specific region, unless they meet at least 4 of these 12 conditions, and it was generated on a Tuesday morning.”

This requirement isn’t very realistic, but it’s to provide an example where an organization believes that they must meet highly complex requirements about when users can and cannot access records.  It’s likely that the out-of-the-box CRM security tools cannot easily meet these types of expectations as-is without some tricky code.

It is best in this case to demonstrate best practices for the system, and suggest workable alternatives that can be in line with their business rules.  However, if the organization won’t budge on their complex security requirements, there are security options in CRM that I call “wildcards”.  They are wildcards because they can help address the most complex requirements, but may also introduce unexpected performance results.

• In CRM it is possible to programmatically “share” a record with a user.  The Sharing functionality bypasses any security model by directly granting a user access to a specific record.  As many Dynamics CRM aficionados know, it is best to use this functionality very sparingly, since it may overtax the system and cause performance issues for users.  However tempting this dark side may be, you should only employ this functionality if it can be proved that system performance can scale according to usage.
• A combination of Sharing and Teams may be an alternative strategy.  Teams allow us to group users and assign access in bulk.  Sharing a record to a Team record will be more efficient for the system than sharing the same record with multiple User records.  This approach will help minimize the impact to the system performance, but should always be fully vetted and tested for scalability.

Security Modeling Tools Matrix

To condense most of the content above, I’ve provided my analysis of the different security tools available in CRM.

Designing a security model in CRM can be quite the puzzle to think about, but is an essential step towards a successful implementation of Dynamics CRM.  The challenge is coming up with a simple yet elegant design that can directly meet the organization’s needs.  If done right, you can be confident your CRM system can easily make that Kessel Run in 12 parsecs.

If you are looking for the Dynamics CRM Wireframe Template, please see this linked post.

I hope to have this site back up soon, definitely within the next few weeks.  Please check back later, I hope to have more content with Dynamics CRM 2016 around the corner!

Hope to see you again soon,
-Christian Espinoza

• Download the file here!
  ESCustomIconGallery_1_0_managed1.zip

This may be needed for some of you out there that are seeking to upgrade your CRM system, but are encountering legacy solution management issues.  Please note there will be no update to this solution in the future.  All the best!

This new version has been updated for Dynamics CRM 2015.  More importantly, however, I’ve now added the ability to fashion a Dashboard wireframe. This was the most requested feature since the previous version I posted a year ago.

A short list of the new updates and features below.

• Updated top Nav Bar on all tabs to match Dynamics CRM 2015 appearance.
• All files are now Visio 2010 compatible.
• *NEW!* Dashboards tab
  • Click on the Dashboard tab to view.
  • Pie charts, Bar Graphs, and Line Graphs all leverage Visio functionality.
  • Edit the properties of the chart to configure according to your design.

To download and use this template:

1. Download the ZIP file at this link.
2. To extract, enter the password: crmdynamo.com
3. Open the file labeled “CRM 2015 Wireframes template (Visio 2010)” in Visio or other compatible editor.
4. Add the attached stencils as needed to aid your design.

Please let me know your feedback on this new version by adding a comment below.  Feel free to use it and make it your own, but I’d greatly appreciate a link back to this very post should you share it.  Enjoy!

Please see this post for the latest version of this wireframe template!

Almost every single project I’ve been on requires some proof-of-concept visuals to help win acceptance from the client. It also helps generate some excitement about the end results.  Of course, new implementations based on the latest 2013 version of Dynamics CRM are no exception.

So, as a consultant or analyst, what are your options? Some say you can simply build a quick model in a trial or development CRM system. However, I will argue that there are significant disadvantages to this approach.

• Should the client want to make frequent or significant changes to the forms, it’ll take time to re-build each iteration.
• Due to the messy nature of modeling in the CRM system, the solution cannot be used for production. Rebuilding a new, clean solution adhering to best practices is necessary.
• Generating sample data to populate the custom forms can be a time sink.

My solution? I built a wireframe model template in Visio that allows anyone to model the system with greater flexibility.

The features of this template include:

• A cover sheet
• Custom entity form template
• Custom entity form template (125% zoom for readability)
• Quick Create form template
• Entity Views template
• Navigation Bar template
• Stencil for CRM 2013 forms
• Stencil for CRM 2013 Navigation Bar buttons

Some advantages to using this template:

• The ability to actively work with the client and make instant changes during design sessions, thereby reducing the number of cycles needed to get approval.
• Leverage the included custom stencils to drag-and-drop components to the form you are designing.
• Modify any text on the template form to match your vision of the entity.
• Add notes on the wireframes to visibly highlight key information.  Some possible examples:
  • Field properties
  • Option set values
  • JavaScript functionality
  • Integration notes
  • View filtering conditions
• Use the Visio template to complement your documentation.

Now, if you decide to download and use this template by clicking on the link below, my only request is that you give me credit for my hard work by helping to spread the word via a link to this very post.  It would be much appreciated!

• Download link: Wireframe model template for Dynamics CRM 2013
• Zip file password: crmdynamo.com

This contribution represents a thank you to the Dynamics CRM Community.  I got to where I am now because you shared your knowledge and contributions over the years.

In the future, I may add some Dashboard wireframing options to this document.  Please let me know if it proves useful for you, and I look forward to your feedback!

-Christian Espinoza

Bookmark the below link!

Microsoft Dynamics CRM 2011 updates and hotfixes
http://support.microsoft.com/kb/2555051

The build list, as of October 2013:

After a much lengthy hiatus from blogging, it feels good to be back!    To celebrate my homecoming, I decided to go with a very Microsoft-y look to this blog; let me know if it’s a keeper!  I hope to consistently bring great new content soon, so please check back regularly.

The siren call that brought me out of my semi-retirement from blogging was, of course, the recent announcements regarding Dynamics CRM 2013.  The information outlined in the CRM 2013 Release Preview Guide hint at a compelling new look and significant new features.

Some key highlights:

• A fresh and modern UI experience that focuses on usability and mobile device interaction.   This cleaner and flatter design aligns with the current look of Office 2013, Windows 8 and Windows Phone.  Virtually no popups compared to previous versions of Dynamics CRM, which is great for user adoption.
• Simplified data entry with a new “Quick Create” form and inline editable grids.
• A new Customer Summary feature that outlines the profile of customer records with images, mapping capabilities, and a new “Quick View” form for easy access to key data.
• Enhanced Process functionality that, in my opinion, is the star of the new version.  New features include a point-and-click process designer interface, guided business processes, role-specific process assignments, and the ability for processes to span across multiple entities.  Truly empowering for the CRM Designer!
• Embedded Skype integration to stay connected with customers.
• Touch optimized UI interface as well as mobile phone and tablet applications for users on the go.

I’m currently evaluating the Dynamics CRM 2013 Beta version to get up to speed with these new features and share them in detail with you when the time is right.   Stay tuned!

-Christian

Note: this article was also published within the Avanade Blog community.  Check it out!

These are thrilling times for technology.  With the launch of Microsoft Windows 8 and the debut of new hardware like the Surface tablet, Microsoft is taking a very calculated leap of faith in the mobility trend. The effect of Windows 8 on the average consumer will be interesting to watch but the real question is the impact of this technology on the business world. More specifically, I’m excited to see how Windows 8 will enable new mobile CRM options and impact how businesses manage customer relationships with Microsoft Dynamics CRM.

In my last post, I’ve outlined a case for the mobile CRM trend in the enterprise.  It would make quite an impression to customers if your salesperson schedules an appointment, creates an order, and automatically e-mails an invoice on the spot – all on their tablet PC.  This sample scenario highlights two of the most evident advantages to mobile CRM: improving productivity for on-the-go users and enhancing customer relationships.

So, as we look ahead regarding Windows 8 and Dynamics CRM, what do we know now, and what can we expect to come?

Choose Your OS: Windows 8 RT vs. Pro

Before contemplating the future of Dynamics CRM, it pays to review the hardware and OS options at hand.  Organizations must first decide which of the existing two versions of Windows 8 to focus on: the tablet-oriented RT version and the full true version of the OS –Windows 8 Pro.  The essential difference between the two boils down to one question: will your organization ever need to run legacy Windows applications?

New hardware releases like the Microsoft Surface RT permit a lower cost mobile hardware solution for your organization, but can’t run legacy applications designed for Windows 7 or older versions.  In contrast, the soon to be released Windows Surface Pro and other similar PC’s running the Pro version are true laptop replacements. Although a costlier option, it can provide tablet mobility and legacy app support without the cost of remaking your current business application environment.  Both have their pros and cons, and a review of your organization’s existing architecture should be considered before any Windows 8 implementation is begun.

Dynamics CRM Refresh: Now More Mobile Friendly

For years, Dynamics CRM 2011 has made positive waves across the business world, but Microsoft decided a “refresh” is in order to align the software with the recent release of Windows 8 and Office 2013.  So far, Dynamics CRM insiders are aware of two future releases in the pipeline.

The first and upcoming December 2012 Service Update for Dynamics CRM 2011 is no slouch.  Highlights include cross-browser support, touch optimized interface, a new “Flow” user experience to enhance workflows, native integration with social and communication apps like Skype and Yammer, a refreshed Office 2003 design user experience, and an enhanced API for developers. These forthcoming features are exciting to contemplate and they immediately prepare your Dynamics CRM deployment for the mobile future.

The next release, code name ‘Orion,’ is the second known future release of Dynamics CRM.  Not many details are currently available, but what we do know is that it is the next major release version for Dynamics CRM and is planned for the second half of 2013.  We can predict that Orion will be similar in style to the December update but powered by its own unique code base, along with expanded customization and development tools for a better mobile experience.

Better together: Mobility, Windows 8 and Dynamics CRM

In the past, Dynamics CRM offered a mobile solution but with a limited deployment and utility.  Its best experience resided primarily on the desktop.  With Windows 8, the future is a new open frontier for mobile CRM applications.  Immediately available in the Windows Store are powerful Windows 8 apps like Power8CRM, Resco Mobile CRM and Dynamics CRM KPI, which leverage all the latest features in Windows 8 to deliver compelling mobile CRM solutions.  More are sure to be available very soon in 2013.

Ultimately, the best experience for your mobile users lies in application solution tailored the way you do business. With the latest in mobile PC hardware, CRM ecosystem and infrastructure, the keys to a successful mobile CRM implementation are in place.  Microsoft Windows 8 and Dynamics CRM are now poised to bring all this technology together into an ideal solution to meet your mobile requirements and support your mobile users.