The current user does not have required permission 'read' to load item: Resource Manager Dashboard Console Menu

Products

• IT Management Suite

Issue/Introduction

Error while accessing Resource Manager using a custom Security Role.

Module: w3wp.exe
Source: global.asax
Description: Unhandled exception.
Type=Altiris.NS.Exceptions.AeXUnauthorizedAccessException Msg=The current user does not have required permission 'read' to load item 'Resource Manager Dashboard Console Menu (eaca1c98-228b-49ee-b8e8-d0be32d95e5a)'

Environment

SMP 7.1 SP2 and later
SMP 7.5 and later
SMP 8.x

Cause

Custom Security Role doesn't have rights to certain hidden folders.

Resolution

In this particular case, the custom Security Role needed to have at least 'Read' permissions to its parent folder called "Hidden Console Elements" (GUID: '48FF3A07-9444-4BC8-B862-9B31CA208F2D' )

1. Searched the database for it:
select * from Item
where guid = '48FF3A07-9444-4BC8-B862-9B31CA208F2D' --Hidden Console Elements

You will notice that it has attribute '19', which is to hide the object.

2. Unhide this "Hidden Console Elements" folder so you can grant 'Read' permissions to it:
update Item
set Attributes = Attributes-1
where guid = '48FF3A07-9444-4BC8-B862-9B31CA208F2D'
and Attributes&1=1

3. Now you should be able to see this "Hidden Console Elements" folder and its subfolders. Go to Security Role Manager and grant Read permissions to the "Hidden Console Element" folder so the "Resource Manager Dashboard Console Menu" and any other one associated to Resource Manager are able to be displayed.

4. After the desired rights were granted, use the following query to hide it back:
update Item
set Attributes = Attributes+1
where guid = '48FF3A07-9444-4BC8-B862-9B31CA208F2D'
and Attributes&1!=1

 

Note:

Other times that you may need to consider to grant permissions to the Resource Manager for a Computer:

180424 "How to give access to the Resource Manager tabs"