000015724 - 'You are not authorized to access this resource' after logging into SelfService console

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000015724
Applies ToAuthentication Manager 7.1
Issue"You are not authorized to access this resource " after logging into AM 7.1 SelfService console
In imsTrace.log: "trace.com.rsa.ims.da.impl.AuthorizationImpl, DEBUG, mah-cmi-ace1.cmi2.nyx.com, , , , Got 0 permissions back for SelfServiceAdmin_u2xrhhww ..."
Could not access SelfService console selfservice-console
CauseWhen trying to log into the selfservice console a user is shown a message saying that "You are not authorized to access this resource".

To further troubleshoot this issue please turn on verbose logging for your primary AM 7.1 instance. Once verbose logging is turned on, reproduce the issue again and then look for a line like the following in AM_HOME\server\log\imsTrace.log :

(AuthorizationImpl.java:232), trace.com.rsa.ims.da.impl.AuthorizationImpl, DEBUG, my.hostname, , , , Got 0 permissions back for SelfServiceAdmin_xxxxxxxx

You should obtain more than "0 permission" for the builtin SelfServiceAdmin acct.
ResolutionCheck in the AM Security Console that the SuperAdmin role wasn't removed from the "SelfServiceAdmin_xxxxx" account or that the account hasn't been completely deleted.
Legacy Article IDa51762

Attachments

    Outcomes