The Dynamics 365 authorization mechanism is comprehensive and flexible. One of its greatest features is its capability to provide users with cumulative privileges as more security roles are added.

In this recipe we will build three cumulative roles: a base role that every user logging in through the web user interface must have, a read role, and a write role. The union of all three roles will enable users to read/write account and contact entities.