"You only have permission to view the data on the Failover dialog" when trying to enable Provisioning Server failover

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

When trying to enable and edit the Failover in the CA Identity Manager Provisioning Manager, the msg: "You only have permission to view the data on the Failover dialog." is displayed (see below).

Environment

Release : 14.x

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Cause

The Provisioning Server details are stored in the Windows registry on the machine hosting the Provisioning Manager in the registry hive below:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ComputerAssociates\Identity Manager\Provisioning Manager\Routers\

A new hive is added for each distinct router; for example.

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ComputerAssociates\Identity Manager\Provisioning Manager\Routers\2

 

When a system user wishes to access the windows registry it is in read-only mode.  To make changes to the registry requires Windows Administrative privileges.

Resolution

In the context of the Provisioning Manager, a Windows System account normally runs the Provisioning Manager application ("etaadmin") and this does not have access to write to the registry.  To overcome this issue Run Provisioning Manager (etaadmin) as Administrator (RunAs Administrator).  This will allow the administrator to add and edit the Failover Provisioning Servers.

Additional Information

For more information on Provisioning Failover please refer to the product documentation:

Failover for Provisioning clients