UC/UC missing "Token access and token creation", cannot assign privilege

Products

• CA Automic Workload Automation - Automation Engine
• CA Automic One Automation

Issue/Introduction

Unable to assign the new privilege "Token access and token creation" and UC/UC user does not have this privilege.

As documented, since v24.1 users can no longer assign privileges that they don't have themselves (See What's New in v24.1: Least Privilege Requirement for Granting Privileges to other Users)

https://docs.automic.com/documentation/webhelp/english/AA/24.2/DOCU/24.2/Automic%20Automation%20Guides/Content/_Common/ReleaseHighlights/WhatsNew_24_1_0.htm?tocpath=What%27s%20New%20in%20Version%2024%7C_____2#Privileges

And here in the note at the beginning of the page (Important!):

https://docs.automic.com/documentation/webhelp/english/ALL/components/DOCU/24.1.0/Automic%20Automation%20Guides/Content/AWA/AdministrationPerspective/obj_user_defining_AEPriv.htm

 

This led to a specific problem in v24.2 with the new privilege called 'Token access and token creation'.

Environment

v24.2.0

Cause

UC/UC was also missing the privilege 'Token access and token creation' and users may no longer grant themselves privileges they do not already have

Resolution

Solution:

This has been fixed with 24.2.0 HF1 where the UC/UC user now has the missing privilege 'Token access and token creation'

Fix version:

Component(s): Automation Engine

Automation.Engine 24.2.0 HF1 - Available October, 2024

Additional Information

The reference for this bug is DE154009

AAKE: Due to the missing privilege in UC/UC and ADMIN/ADMIN the deployment or upgrade of an AAKE instance fails in v24.2.0.