CA Identity Manager: Unable to work with a newly created Unix V2 endpoint "Permission Denied" errors

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

After creating a new Unix V2 endpoint, you'll see the following error when trying to create or interact with a user account: 

 

Cannot perform the operation on [group]. The information returned to the endpoint is ['/bin/sh: /user/sbin/groupadd: Permission denied', 'rc=126'].

or 

Cannot perform the operation on [user]. The information returned by the endpoint is ['/bin/sh: /usr/sbin/useradd: Permission denied', 'rc=126']. 
 

Environment

Release:
Component: IDMGR

Resolution

When you create a Unix endpoint in Identity Manager, the service account needs to either be root or have sudoer rights. If the user is not root, you also need to check off the "Use Sudo" checkbox while creating the endpoint.