RTSM Custom Security Role unable to access RTSM Console

Products

• Real-Time System Manager

Issue/Introduction

When attempting to access the Real-Time Systems Manager console as part of a resource you get an error stating to check the logs.

In the logs you find the following error;

Process: w3wp (11052)
Thread ID: 7
Module: w3wp.exe
Source: global.asax
Description: Unhandled exception.  Type=Altiris.NS.Exceptions.AeXUnauthorizedAccessException Msg=The current user does not have required permission 'read' to load item 'Default Connection Profile (2f09d5a6-1d2c-4f10-92c8-0033cb96894b)'.
StackTrace=
   at Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(String message)
   at Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem item, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.NS.ItemManagement.Item.GetItem[T](Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.NS.ItemManagement.Item.GetItem(Guid itemGuid)
   at Altiris.RTCI.Web.RealTimeHome.Page_Load(Object sender, EventArgs e)
   at System.Web.UI.Control.OnLoad(EventArgs e)
   at Altiris.RTCI.WebPage.OnLoad(EventArgs e)
   at System.Web.UI.Control.LoadRecursive()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Cause

Insufficient permissions for the (custom) security role to access the Default Connection Profile data

Resolution

To add permissions to allow your (custom) security role access to the connection profile do the following;

Go to Settings > All Settings > Monitoring and Alerting > Protocol Management > Connection Profiles > Manage Connection Profiles.

Here select the connection profile you want to grant rights to. On a default install you'd normally need to grant rights on the Default Connection Profile.
Select the profile and hit edit (the pencil icon).

At the top of the Connection Profile settings window you will see a link "Access permissions to Protocol Settings". Click this link and select "Add" and add the security role you want to grant permissions to access the connection profile. For minimum settings you'd likely want to enable Read system permissions as well as usage permissions to the protocol profile.

Save and close out the dialogs and test your security role again. It should now be able to access the RTSM console and items on your resources.

Applies To
Real-Time Systems Manager 7