Generate a SQL query for Microsoft Dynamics 365 that retrieves all security privileges for each entity accessible to a specific user. 
The query should:
1. Accept a username as an input parameter
2. Include all entities the user has access to
3. Show the specific privileges (Create, Read, Update, Delete, Append, AppendTo, Assign, Share) for each entity
4. Consider privileges granted through the user's security roles and team memberships
5. Specify the level of access for each privilege using the following scale:
   * No Access
   * User Level
   * Business Unit Level
   * Parent: Child Business Unit Level
   * Organization Level
6. Display results in a format similar to: Entity | Create | Read | Update | Delete | Append | AppendTo | Assign | Share
7. For each privilege, instead of a simple 'Yes/No' or binary indicator, show the highest level of access granted to the user across all their roles and teams.
8. The query should join relevant CRM tables like SystemUserPrincipals, RolePrivileges, TeamPrivileges, and PrincipalObjectAccess. 
9. Use appropriate system views if available.
10. Ensure the query accounts for the hierarchical nature of access levels, where Organization Level access supersedes Business Unit Level, which in turn supersedes User Level access.
11. The query should be optimized for performance, as it may need to process a large number of records in a production CRM environment.
Example desired output: 
Entity          | Create        | Read          | Update        | Delete        | Append        | AppendTo      | Assign        | Share  
Account         | Organization  | User          | No Access     | Parent: Child | Business Unit | Organization  | User Contact  | Organization 
Activity        | User          | User          | User          | No Access     | Business Unit | Organization  | User Contact  | Organization 
Connection      | User          | User          | User          | No Access     | No Access     | Parent: Child | Parent: Child | Organization 

-- Declare input parameter for username
DECLARE @Username NVARCHAR(100) = 'example.user@domain.com';

WITH UserRoles AS (
    -- Get all roles for the user, including those from team memberships
    SELECT DISTINCT sr.RoleId
    FROM SystemUserPrincipals sup
    JOIN SystemUserRoles sur ON sup.PrincipalId = sur.SystemUserId
    JOIN SecurityRole sr ON sur.RoleId = sr.RoleId
    WHERE sup.SystemUserId = (SELECT SystemUserId FROM SystemUser WHERE DomainName = @Username)
    UNION
    SELECT DISTINCT sr.RoleId
    FROM SystemUserPrincipals sup
    JOIN TeamMembership tm ON sup.PrincipalId = tm.SystemUserId
    JOIN TeamRoles tr ON tm.TeamId = tr.TeamId
    JOIN SecurityRole sr ON tr.RoleId = sr.RoleId
    WHERE sup.SystemUserId = (SELECT SystemUserId FROM SystemUser WHERE DomainName = @Username)
),
UserPrivileges AS (
    -- Aggregate privileges from all roles
    SELECT 
        rp.PrivilegeId,
        e.Name AS EntityName,
        MAX(rp.PrivilegeDepthMask) AS MaxPrivilegeDepthMask
    FROM UserRoles ur
    JOIN RolePrivileges rp ON ur.RoleId = rp.RoleId
    JOIN [Privilege] p ON rp.PrivilegeId = p.PrivilegeId
    JOIN EntityType e ON p.EntityTypeMask = e.EntityTypeMask
    GROUP BY rp.PrivilegeId, e.Name
),
AccessLevels AS (
    -- Define access levels
    SELECT 0 AS Mask, 'No Access' AS AccessLevel
    UNION SELECT 1, 'User'
    UNION SELECT 2, 'Business Unit'
    UNION SELECT 4, 'Parent: Child Business Unit'
    UNION SELECT 8, 'Organization'
)
SELECT 
    up.EntityName,
    MAX(CASE WHEN p.PrivilegeName = 'prvCreateEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [Create],
    MAX(CASE WHEN p.PrivilegeName = 'prvReadEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [Read],
    MAX(CASE WHEN p.PrivilegeName = 'prvUpdateEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [Update],
    MAX(CASE WHEN p.PrivilegeName = 'prvDeleteEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [Delete],
    MAX(CASE WHEN p.PrivilegeName = 'prvAppendEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [Append],
    MAX(CASE WHEN p.PrivilegeName = 'prvAppendToEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [AppendTo],
    MAX(CASE WHEN p.PrivilegeName = 'prvAssignEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [Assign],
    MAX(CASE WHEN p.PrivilegeName = 'prvShareEntity' THEN al.AccessLevel ELSE 'No Access' END) AS [Share]
FROM UserPrivileges up
CROSS APPLY (
    SELECT PrivilegeId, PrivilegeName 
    FROM [Privilege] 
    WHERE PrivilegeName IN ('prvCreateEntity', 'prvReadEntity', 'prvUpdateEntity', 'prvDeleteEntity', 
                            'prvAppendEntity', 'prvAppendToEntity', 'prvAssignEntity', 'prvShareEntity')
) p
LEFT JOIN AccessLevels al ON up.MaxPrivilegeDepthMask & al.Mask = al.Mask
GROUP BY up.EntityName
ORDER BY up.EntityName;

DECLARE @username NVARCHAR(256) = 'your_username_here';
DECLARE @systemuserid UNIQUEIDENTIFIER;

-- Get the SystemUserId for the specified username
SELECT @systemuserid = su.SystemUserId
FROM SystemUser su
WHERE su.DomainName = @username;

-- CTE to get all RoleIds assigned to the user directly or via team memberships
WITH UserRoleIds AS (
    SELECT sur.RoleId
    FROM SystemUserRoles sur
    WHERE sur.SystemUserId = @systemuserid
    UNION
    SELECT tr.RoleId
    FROM TeamRoles tr
    INNER JOIN TeamMembership tm ON tr.TeamId = tm.TeamId
    WHERE tm.SystemUserId = @systemuserid
),
-- CTE to get the highest PrivilegeDepthMask for each PrivilegeId
UserPrivileges AS (
    SELECT
        rp.PrivilegeId,
        MAX(rp.PrivilegeDepthMask) AS MaxPrivilegeDepthMask
    FROM RolePrivilegesBase rp
    WHERE rp.RoleId IN (SELECT RoleId FROM UserRoleIds)
    GROUP BY rp.PrivilegeId
),
-- CTE to get Privilege details along with ObjectTypeCode
PrivilegesWithAccessRights AS (
    SELECT
        up.PrivilegeId,
        up.MaxPrivilegeDepthMask,
        p.Name,
        p.AccessRight,
        potc.ObjectTypeCode
    FROM UserPrivileges up
    INNER JOIN Privilege p ON up.PrivilegeId = p.PrivilegeId
    LEFT JOIN PrivilegeObjectTypeCodes potc ON p.PrivilegeId = potc.PrivilegeId
),
-- CTE to get Entity names
PrivilegesWithEntityName AS (
    SELECT
        pwac.PrivilegeId,
        pwac.Name,
        pwac.AccessRight,
        pwac.MaxPrivilegeDepthMask,
        pwac.ObjectTypeCode,
        ev.LogicalName AS EntityLogicalName,
        ev.OriginalLocalizedName AS EntityDisplayName
    FROM PrivilegesWithAccessRights pwac
    LEFT JOIN EntityView ev ON pwac.ObjectTypeCode = ev.ObjectTypeCode
),
-- CTE to map AccessRight and PrivilegeDepthMask to readable formats
PrivilegesWithAccessLevels AS (
    SELECT
        COALESCE(pwcn.EntityDisplayName, 'Global Privilege') AS EntityName,
        CASE pwcn.AccessRight
            WHEN 1 THEN 'Create'
            WHEN 2 THEN 'Read'
            WHEN 4 THEN 'Update'
            WHEN 16 THEN 'Delete'
            WHEN 32 THEN 'Assign'
            WHEN 64 THEN 'Share'
            WHEN 128 THEN 'Append'
            WHEN 256 THEN 'AppendTo'
            ELSE 'Unknown'
        END AS AccessRightName,
        CASE
            WHEN pwcn.MaxPrivilegeDepthMask = 8 THEN 'Organization Level'
            WHEN pwcn.MaxPrivilegeDepthMask = 4 THEN 'Parent: Child Business Unit Level'
            WHEN pwcn.MaxPrivilegeDepthMask = 2 THEN 'Business Unit Level'
            WHEN pwcn.MaxPrivilegeDepthMask = 1 THEN 'User Level'
            ELSE 'No Access'
        END AS AccessLevel
    FROM PrivilegesWithEntityName pwcn
    WHERE pwcn.AccessRight IN (1,2,4,16,32,64,128,256)
)
-- Final SELECT with PIVOT to display privileges per entity
SELECT
    EntityName,
    ISNULL([Create], 'No Access') AS [Create],
    ISNULL([Read], 'No Access') AS [Read],
    ISNULL([Update], 'No Access') AS [Update],
    ISNULL([Delete], 'No Access') AS [Delete],
    ISNULL([Append], 'No Access') AS [Append],
    ISNULL([AppendTo], 'No Access') AS [AppendTo],
    ISNULL([Assign], 'No Access') AS [Assign],
    ISNULL([Share], 'No Access') AS [Share]
FROM
    (
        SELECT
            EntityName,
            AccessRightName,
            AccessLevel
        FROM
            PrivilegesWithAccessLevels
    ) AS SourceTable
PIVOT
(
    MAX(AccessLevel)
    FOR AccessRightName IN ([Create], [Read], [Update], [Delete], [Append], [AppendTo], [Assign], [Share])
) AS PivotTable
ORDER BY EntityName;