Setting up Proxy User in Microsoft Dynamics (Online or On-Premises)

Using a proxy will allow you to bypass the Sync form so that your users will not need to specify their credentials every time they access the system.

NOTE: Demandbase supports Proxy User authentication for Microsoft Dynamics CRM 2011 On-Premise and above versions. 

Please ensure the following while setting up the Proxy user:

• Make sure this user is assigned a “Proxy” role
• Make sure this user is part of the PrivUser group (privileged user group)

The proxy user you select or create must be set up with minimum privileges. Set up a Security Role in the CRM with the following privileges to a new user or an existing user who is required to perform Sync and assign this Security Role to the user you created or the existing user you selected. 

The Proxy user role existed in CRM 4 and it was renamed to Delegate in CRM 2011+. For sync/export operations the concept of Impersonate another user is used. This is achieved by setting up a proxy user (aka integration user, aka service account). When setting up a proxy user, make sure the proxy user has the prvActOnBehalfOfAnotherUser privilege assigned and this can be done either by manually activating the privilege or by assigning the out of the box Delegate role.

User impersonation does not mean the proxy user is always granted elevated privileges. In some cases, it may get lesser privileges. This article clearly explains what the effective privileges for the proxy user will be when using impersonation: https://msdn.microsoft.com/en-us/library/gg334744.aspx. 

Name of the Security Role: "InsideView User Role".

Required privileges

• Area: Core Records
• Privileges: See the screenshot below

• Area: Business Management:
• Required Privileges:

• Area: Customization
• Required Privileges: 

• Area: Custom Entities
• Required Privileges:

Once the Security Role is created, assign this Security Role to the user created or the existing user you selected.

The following are the steps to configure the Proxy user created within InsideView to by-pass the Sync Authentication UI pop-up: