Record Level Privileges

Record-level privileges

PowerApps and customer engagement apps (Dynamics 365 Sales, Dynamics 365 Customer Service, Dynamics 365 Field Service, Dynamics 365 Marketing, and Dynamics 365 Project Service Automation), use eight different record-level privileges that determine the level of access a user has to a specific record or record type.

RECORD-LEVEL PRIVILEGES

Privilege	Description
Create	Required to make a new record. Which records can be created depends on the access level of the permission defined in your security role.
Read	Required to open a record to view the contents. Which records can be read depends on the access level of the permission defined in your security role.
Write	Required to make changes to a record. Which records can be changed depends on the access level of the permission defined in your security role.
Delete	Required to permanently remove a record. Which records can be deleted depends on the access level of the permission defined in your security role.
Append	Required to associate the current record with another record. For example, a note can be attached to an opportunity if the user has Append rights on the note. The records that can be appended depend on the access level of the permission defined in your security role. In case of many-to-many relationships, you must have Append privilege for both entities being associated or disassociated.
Append To	Required to associate a record with the current record. For example, if a user has Append To rights on an opportunity, the user can add a note to the opportunity. The records that can be appended to depend on the access level of the permission defined in your security role.
Assign	Required to give ownership of a record to another user. Which records can be assigned depends on the access level of the permission defined in your security role.
Share	Required to give access to a record to another user while keeping your own access. Which records can be shared depends on the access level of the permission defined in your security role.