OIM AD Connector Create User Fails With: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
(Doc ID 2727133.1)
Last updated on NOVEMBER 20, 2020
Applies to:
Identity Manager Connector - Version 12.2.1.3.0 and laterInformation in this document applies to any platform.
Symptoms
Configured Active Directory User Management connector.
The service account used in the IT Resource was not added to "Account Operations" group, but was granted rights to create, update and disable users.
This is working when connecting directly to AD, but from the connector the Create User operation is failing with Access Denied:
<Oct 15, 2020 4:41:29,202 PM PKT> <Error> <ORACLE.IAM.CONNECTORS.ICFCOMMON.PROV.ICPROVISIONINGMANAGER> <BEA-000000> <oracle.iam.connectors.icfcommon.prov.ICProvisioningManager : createObject : Error while creating user
java.lang.RuntimeException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$15.createException(CommonObjectHandlers.java:283)
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$15.createException(CommonObjectHandlers.java:280)
....................................
at org.identityconnectors.framework.impl.api.remote.RemoteFrameworkConnection.readObject(RemoteFrameworkConnection.java:153)
at org.identityconnectors.framework.impl.api.remote.RemoteOperationInvocationHandler.invoke(RemoteOperationInvocationHandler.java:101)
at com.sun.proxy.$Proxy626.create(Unknown Source)
....................................
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADIDCCREATEOBJECT.CREATEOBJECT(adpADIDCCREATEOBJECT.java:109)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADIDCCREATEOBJECT.implementation(adpADIDCCREATEOBJECT.java:54)
Note that from the connector, all other operations (search, modify) are successful, only create fails.
Changes
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |