i posted it in the CRM newsgroups but i didn't get any answers.

i'll post here for you in case you have any solution.

thanks.

I configured some security roles for my client to fit his security policies.

However all the users assigned one of these roles can’t use track in CRM
option in the Outlook client.

When I tried to give them some access rights to leads and contact and
accounts it works, but this is not accepted at all by our client or by us or
by logic, because some users should not have access to anything but the cases.

I was thinking that track in CRM feature is depending on (the user have
access to any entity that can have e-mails related to it) and I think it
should be that way.

Consider this scenario (A support user don’t have access to leads, accounts,
contacts and opportunities, because they are support users for internal
helpdesk, but they have access to Cases, so they should be able to track
e-mails to cases ONLY).

Making track in CRM depending on access rights to customers records, leads
and opportunities elements the possibility to create security roles to fit
some scenarios as mentioned above, and this is a disaster.

If anyone knows what is the least required privilege to be able to use track
in CRM feature please provide us with that information.

And I think Microsoft should document these dependencies somewhere.