A user privilege cannot be assigned

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

As documented, since v24.1 users can no longer assign privileges that they don't have themselves (See What's New in v24.1: Least Privilege Requirement for Granting Privileges to other Users)

https://docs.automic.com/documentation/webhelp/english/AA/24.2/DOCU/24.2/Automic%20Automation%20Guides/Content/_Common/ReleaseHighlights/WhatsNew_24_1_0.htm?tocpath=What%27s%20New%20in%20Version%2024%7C_____2#Privileges

And here in the note at the beginning of the page (Important!):

https://docs.automic.com/documentation/webhelp/english/ALL/components/DOCU/24.1.0/Automic%20Automation%20Guides/Content/AWA/AdministrationPerspective/obj_user_defining_AEPriv.htm

 

This led to a specific problem in v24.2 with the new privilege called 'Token access and token creation'.

Environment

v24.2.0

Cause

Users may no longer grant themselves privileges they do not already have, but UC/UC was also missing the privilege 'Token access and token creation'

Resolution

Solution:

Update to a fix version listed below or a newer version if available.

Fix version:

Component(s): Automation Engine

Automation.Engine 24.2.0 HF1 - Available

Additional Information

The reference for this bug is DE154009

AAKE: Due to the missing privilege in UC/UC and ADMIN/ADMIN the deployment or upgrade of an AAKE instance fails in v24.2.0.