Synchronize CRM 2011 and SharePoint Security

Question

I integrated our SharePoint site and our Dynamics CRM 2011 system so that we can download documents from CRM. But I thought that because of security in CRM, users can only see records related to them, but if they just go to the SharePoint site, they can see documents associated with any record, even if they cannot see them in CRM.

Therefore, I was wondering if it was possible to somehow “synchronize” security with CRM in SharePoint so that users could not see that they were not designed for any system.

thanks

Answer 1

Unfortunately, this is not possible out of the box. The SharePoint security model is typically based on AD groups, while CRM uses application security roles for each user.

To synchronize them, you will need some custom server-side development, that is, if at all possible.

Answer 2

It is possible out of the box. There is a commercial CB Replicator solution that solves exactly this problem. It performs complex mapping of the CRM security model in SharePoint groups and folder-level permissions.

It is briefly described that it deploys a tiny plugin in CRM that collects all the events that may require permission changes. There is a separate service that receives these events and writes the appropriate permissions to SharePoint as element-level permissions for referenced folders using the sharepointdocumentlocation object.

It supports various actions in CRM that change permissions, for example, security roles, hierarchy of business units, depth of privileges, team membership, access group, access command templates, sharing.