Create new role in Microsoft Dynamics CRM 2013 (6.1.3.119)

Hello,

I have a problem. I would like to create new role in Microsoft Dynamics CRM 2013 (6.1.3.119).

I’m system administrator.

The new role should only be able to create, edit and enable / disable users in CRM.

I was added all privileges in the tabs groups of entities or functions excluding function “Contact” in Core Records group.

I tested new role. I was added user the some role and an error was occurred.

I share screen below:

It is log with this event CRM:

Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=6.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: System.Web.HttpUnhandledException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #A5D4BEB3Detail:

<OrganizationServiceFault xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/xrm/2011/Contracts">

  <ErrorCode>-2147220970</ErrorCode>

  <ErrorDetails xmlns:d2p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic" />

  <Message>System.Web.HttpUnhandledException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #A5D4BEB3</Message>

  <Timestamp>2017-01-16T13:06:20.1668313Z</Timestamp>

  <InnerFault>

    <ErrorCode>-2147220960</ErrorCode>

    <ErrorDetails xmlns:d3p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic" />

    <Message>RoleService::VerifyCallerPrivileges failed. User: 5126862d-3fd6-e511-95b9-0050569b1b72, PrivilegeName: prvShareSLA, PrivilegeId: f3dea36a-1c40-4901-94e2-119491ad7563, Depth: Basic, BusinessUnitId: 2aef0c6f-c213-e411-85e7-0050569b1b72</Message>

    <Timestamp>2017-01-16T13:06:20.1668313Z</Timestamp>

    <InnerFault i:nil="true" />

    <TraceText i:nil="true" />

  </InnerFault>

  <TraceText i:nil="true" />

</OrganizationServiceFault>

It’s problem because I didn't see anywhere privilege Name "prvShareSLA" . I have only 4 functions in Service Management tab.

The last function is “Service”.

Like screen on my desktop:

Probably I should see more functions on this tab.

For example: https://community.dynamics.com/cfs-file/__key/communityserver-discussions-components-files/117/systemCustomizer.jpg

Actually, I don't know why I must add the privilege SLA from role of which is to administrate users account.

Is it possible that I will be able to create such a role ?

Can you help me ?