Sales Hub Basics: Why ‘Sales Enterprise App Access’ Isn’t Enough

What is "Sales Enterprise app access"?

"Sales Enterprise app access" is a predefined security role in Dynamics 365 CRM. It's specifically used to grant access to the Sales Enterprise application (Sales Hub) — but it does not provide CRUD access (Create, Read, Update, Delete) to actual data like accounts, opportunities, or leads.

Logical Meaning

• It's like a "pass" to enter the Sales Enterprise app interface.

• It’s not enough to do work — users still need additional roles (like Salesperson, Sales Manager, or a custom role) to interact with records.

• Think of it as a door key to the building, not keys to the individual offices inside.

• The role provides Model-Driven App access permissions.

• It includes privileges to use the app shell, navigation, dashboards, and access to the Sales Hub UI.

• No read/write permissions to any entity (like Account, Lead, Opportunity, etc.).

• Without additional roles, users will see an empty app — no data.

• Always assign this role + a functional role (like Salesperson or Sales Manager) to users who need to use Sales Hub.

• If using custom apps, assign custom app access roles instead.