ProxyUI Error: Exception User might not have required permissions to get group information
Article ID: 130190
Updated On:
Products
CA Single Sign On Secure Proxy Server (SiteMinder)
CA Single Sign On SOA Security Manager (SiteMinder)
CA Single Sign-On
Issue/Introduction
I have installed, configured/registered Access Gateway with my Policy Server.
Upon logging in to Access Gateway Proxyui, the User Name at the top shows "null" and I get below error,
"Error: Exception User might not have required permissions to get group information"
When I try to create any groups, I get error,
"Error: Unable to Add to a Group"
I followed link below but error still persists.
https://docops.ca.com/ca-single-sign-on/12-8/en/using/ca-access-gateway-administrative-ui/group-configuration-settings-configuration/
Below is a screenshot of the errors.
Upon logging in to Access Gateway Proxyui, the User Name at the top shows "null" and I get below error,
"Error: Exception User might not have required permissions to get group information"
When I try to create any groups, I get error,
"Error: Unable to Add to a Group"
I followed link below but error still persists.
https://docops.ca.com/ca-single-sign-on/12-8/en/using/ca-access-gateway-administrative-ui/group-configuration-settings-configuration/
Below is a screenshot of the errors.
<Please see attached file for image>
<Please see attached file for image>
Environment
Access Gateway 12.8. Likely applies to other releases as well.
Resolution
ACO LegacyVariables was set to "no". This was causing problems where the user name was "null" when logging into proxy ui.
Since the user is "null", we couldn't verify that the user had proper permissions for groups and thus we always get the "Error: Exception User might not have required permissions to get group information" error.
To resolve the errors, set ACO LegacyVariables=yes then restart Access Gateway so that you can pick up the new ACO change. After doing so, the proper username is seen after logging in, we no longer see the errors regarding permissions for groups, and we are able to create groups.
Since the user is "null", we couldn't verify that the user had proper permissions for groups and thus we always get the "Error: Exception User might not have required permissions to get group information" error.
To resolve the errors, set ACO LegacyVariables=yes then restart Access Gateway so that you can pick up the new ACO change. After doing so, the proper username is seen after logging in, we no longer see the errors regarding permissions for groups, and we are able to create groups.
Additional Information
Related KBs:
KB000006575 - Another option to resolve the proxyui error "Error: Exception User might not have required permissions to get group information".
KB000041809 - How to resolve the "Error: Exception User might not have required permissions to get group information" when logging into the R12.52 SP1 ProxyUI.
More about ACO LegacyVariables:
https://docops.ca.com/ca-single-sign-on/12-8/en/configuring/web-agent-configuration/web-application-protection/default-http-headers-used-by-the-product
KB000006575 - Another option to resolve the proxyui error "Error: Exception User might not have required permissions to get group information".
KB000041809 - How to resolve the "Error: Exception User might not have required permissions to get group information" when logging into the R12.52 SP1 ProxyUI.
More about ACO LegacyVariables:
https://docops.ca.com/ca-single-sign-on/12-8/en/configuring/web-agent-configuration/web-application-protection/default-http-headers-used-by-the-product
Attachments
Feedback
Yes
No
Powered by
