Published at: 2026-09-17
Function permission troubleshooting guide
Diagnose and resolve function permission issues, such as unexpected buttons, unauthorized actions, and hidden menus.
Overview
💡 Function permissions control the menus, page entry points, and buttons that users see, such as New, Edit, and Unlock. Because function permissions use a role union, compare all roles assigned to a user when the user has too much or too little access.
Before you begin
[!IMPORTANT] - Core logic: A user’s final function permissions are the union of all assigned management roles, business roles, and default employee roles. - Layout factors: If a button was removed or hidden in a page layout, the user cannot see it even when the role grants the permission.
Diagnostic path
Step 1: Find all roles for the user
- Go to Setup > Role Permission > Management Function Permissions.
- In the View by Employee search box, enter the employee’s nickname and identify the assigned management roles.
- Go to Setup > Role Permission > Business Function Permissions.
- In the All CRM Users search box, enter the employee’s nickname and identify the assigned business roles.
Step 2: Collect the role permissions
Review the union of these three permission sources:
- Management roles provide back-end menus and management permissions.
- Object-level and field-level permissions from business roles.
- Global permissions for the object from the All Employees default role. This system role is not shown in an employee’s assigned roles, so check its configuration explicitly.
Step 3: Verify page layout buttons
If role assignments are correct but a button still behaves unexpectedly:
- Go to Object Manager > Target Object > Page Layouts.
- Check the page layout assigned to the role:
- Confirm that New, Edit, Delete, or Unlock is present in the action button area of the Detail Page Layout or List Page Layout.
FAQ
- Symptom: Wang Wu can click Unlock without an Unlock permission
- Diagnosis: Wang Wu has Customer Service Representative, which has no Unlock permission, and Sales Team Leader, which has Unlock permission. The role union grants the button.
- Solution: Remove the business role that grants Unlock from Wang Wu’s account.
- Symptom: The New button is hidden despite the assigned permission
- Diagnosis: Check the target object’s page layout and confirm that the New button is not hidden.