Error: Failed to execute task … User does not have permission to update organization group

Products

• Client Management Suite
• IT Management Suite

Issue/Introduction

Found the following Warning messing in the Notification Server's a.log files and tried to determine what the root cause was:

Severity: 2
Date: 7/17/2022 5:01:47 PM
Tick Count: 205090062
Host Name: <NS server>
Process: AtrsHost (9988)
Thread: 461
Module: Altiris.TaskManagement.dll
Source: ServerTaskExecutionThread
Description: Failed to execute task handler: 'Assign to <OG name> Organizational Group' (0dc8555f-fb68-41c4-acb6-bd1d74e6e251, f0c47f13-f2d0-45c6-8736-05bff7b3ab54)
User does not have permission to update organization group 20c79bf8-d1ee-4704-9ed6-92eaa9f57f24
   [System.Security.SecurityException @ Altiris.Automation]
   at Altiris.Automation.Tasks.AssignToOrgGroupTask.AssignResources(ParameterValueCollection input)
   at Altiris.Automation.Tasks.AssignToOrgGroupTask.OnExecute(IServerTaskExecutionInstance instance)
   at Altiris.TaskManagement.ServerTasks.BaseServerTask.OnExecute(ITaskExecutionEngine engine, IServerTaskExecutionInstance instance, TaskInstanceRequest request)
   at Altiris.TaskManagement.ServerTasks.BaseServerTask.Execute(ITaskExecutionEngine engine, IBaseTaskExecutionInstance instance, TaskInstanceRequest request)
   at Altiris.TaskManagement.Common.Execution.Engine.TaskEngineExecutionThread.ExecuteTaskHandler()
Exception logged from: 
   at Altiris.TaskManagement.Logging.AltirisServerLog.ReportException(Int32, String, String, Exception, String, Object[])
   at Altiris.TaskManagement.Common.Execution.Engine.TaskEngineExecutionThread.ExecuteTaskHandler()
   at Altiris.TaskManagement.ServerTasks.ServerTaskExecutionThread.ExecuteTaskHandler()
   at Altiris.TaskManagement.Common.Execution.Engine.TaskEngineExecutionThread.Execute()
   at Altiris.TaskManagement.Common.Execution.Engine.TaskExecutionEngine.ProcessTaskExecuteOperation(Altiris.TaskManagement.Common.Execution.Engine.TaskInstanceRequest, Altiris.TaskManagement.Common.Execution.Engine.TaskEngineExecutionThread)
   at Altiris.TaskManagement.ServerTasks.ServerTaskManager.ProcessTaskExecuteOperation(Altiris.TaskManagement.Common.Execution.Engine.TaskInstanceRequest, Altiris.TaskManagement.Common.Execution.Engine.TaskEngineExecutionThread)
   at Altiris.TaskManagement.Common.Execution.Engine.TaskExecutionEngine.ProcessTaskExecuteOperation(Object)
   at Altiris.DotNetLib.Threading.AtrsThreadPoolEx.ProcessWorkToDo(System.Threading.Thread, Altiris.DotNetLib.Threading.AtrsThreadPoolWorkItemEx)
   at Altiris.DotNetLib.Threading.AtrsThreadPoolEx.ProcessWorkToDo()
   at Altiris.DotNetLib.Threading.AtrsThreadPoolEx.WorkerThreadRun()
   at Altiris.DotNetLib.Threading.AtrsThreadPoolEx.WorkerThreadProc()
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object)
   at System.Threading.ThreadHelper.ThreadStart()
User [<domain>\altservacct], Auth [<domain>\AltServAcct], AppDomain [AtrsHost.exe]
HTTP [POST]: http://<NSserver>.<domain>.net/Altiris/ASDK.Task/TaskManagementService.asmx
 ip: [110.3.xx.xxx]; content-length: [1114];
 timings: [[R] 00:00:00.4531218(W: 00:00:00)];
 response: [200 OK]; x-smp-nsversion: [8.6.3268.0];

Environment

ITMS 8.6 RU2

Cause

Found that the Automation Policy that was supposed to populated data into the Organization Group was misconfigured and missing the needed input parameter.

Resolution

Added the missing input parameter to the Automation Policy as seen in the screenshots below and this resolved the issue: