FlexOrg Tenant "Not Authorized" error resolution

Products

• CloudHealth

Issue/Introduction

The error message "Not Authorized" will appear when a user either doesn't belong to a Usergroup via a manual assignment or auto assignment, or in the case they are a member of a Usergroup, the Usergroup doesn't have a Role Document setup.

To confirm this navigate to Setup -> Admin -> Usergroups and navigate to the Users tab you should find that the User doesn't belong to a User Group denoted by the User Groups column (will not have a value present).

Alternatively the User will belong to a Usergroup, but the Usergroup won't have a Role Document/Flex Org assigned currently similar to the below:


Note: When undertaking the resolution steps below, you may encounter a 10 minute period where the change isn't reflected in the platform.  This should clear after 10 minutes of the user being signed in.

Resolution steps: User not assigned to Usergroup

To resolve your user not being assigned to a Usergroup you'll need to ask a CloudHealth Administrator to do the following:

1. Navigate to Setup -> Admin -> Usergroups select the Usergroup that targets the Role Document/Flex Org you wish to add the user to.
2. Manually assign the user to the Usergroup via Members -> Add Member and select the User from the list. This will bypass any potential issues with the required value for auto assignment missing in SSO in the short term.
   
   
   
   Following this assignment you should find the user listed with assignment set to "manual" see below-
   
   
   
   
3. This will resolve the login issue in the short term, please also ask the CloudHealth Administrator to verify if SSO mapping has been setup by navigating to the Details tab of the Usergroup 
   
   
   
   If a SSO Key and Value are present under "SSO Mapping" please contact your Single Sign On Administrator to ensure you have that Key/Value applied to your account.

Resolution steps: Usergroup missing assignment

If your CloudHealth Administrator determines that you do belong to a Usergroup it is likely the Usergroup doesn't have a Role Document/Flexorg assignment. In order to verify and resolve this follow these steps:

1. Navigate to Setup -> Admin -> Usergroups and edit the Usergroup the user experiencing the issue belongs to and switch to the Assignment tab - 
   
   
   
   
2. Select the "Assign Role Document" option and select the "Role Document' and "FlexOrg" from the list you wish to assign members of this Usergroup to.
3. Once this has been completed the User should be able to sign in without experiencing the "Not Authorized" error 

Resolution

Once the Usergroup has been set as per the above the user will no longer receive the "Not Authorized" error when accessing the platform.