Hello all,
EV10SP4CHF1 - In my testlab, I have configured the SQL roles according to the procedure as described in http://www.symantec.com/docs/HOWTO80670
This seems to work ok.
I have however event 4216 in the eventlog: (every 5 minutes)
Access denied. User is not in a role that allows 'Can manage Enterprise Vault Exchange Mailbox tasks'.
User: 'NT AUTHORITY\SYSTEM'
I've ran a trace on taskcontroller (attached), and noticed:
1704 {CSecurityWrapper::HasServerClientGotPermission:#515} Checking role access for admin operation [4001]...
1705 {CSecurityWrapper::IsServerClientTheVSA:#864} Checking if server client is VSA...
1706 {CSecurityWrapper::IsServerClientTheVSA:#894} Client server is running as VSA: [False] (in a client COM call: [True]).
1707 {CSecurityWrapper::CommonRoleAccessCheck:#920} Checking access for operation [4001]. Impersonating client: [True]...
1708 {CSecurityWrapper::UpdateAzStoreCacheIfNecessary:#1455} Updating if required...
1709 {CSecurityWrapper::CommonRoleAccessCheck:#997} Access [denied]
1710 {CSecurityWrapper::HasServerClientGotPermission:#557} Caller [doesn't have] role [4001]. Permission [denied].
1711 {CSecurityWrapper::GetOperationNameFromID:#656} Getting name of operation [4001]...
1712 {CSecurityWrapper::ServerClientCheckPermissions:#1567} Operation [Can query Enterprise Vault tasks (4001)] has been denied.
This seems to be indicating an issue with the Role, but I am not sure. Can one of the peers check, and comment? As this is a test-lab environment, it is not urgent, but we do want to configure this in the prod environments too. I need to be sure that this is not an issue due to the roles configuration. It does look like EV works fine (archiving, restoring, archive explorer and search work fine).
Thanks in advance,
Gertjan.
