locked
Trying to grant a non-admin rights to change a singleton class fails RRS feed

  • Question

  • Hi,

    This might be one of those Service Manager "you are not an admin so I'm going to refuse you no matter what rights you have" things, but...

    ...I have a singleton class. I've added both a queue and a group that contains this class in an attempt to grant rights to change the class to non-admins.

    All attempts end with "The user DOMAIN\user does not have sufficient permission to perform the operation".

    Has anyone else managed to get this working?

    Cheers,

    Rob

    Thursday, September 22, 2011 3:18 AM

Answers

All replies

  • From that class are derived your singleton class?


    http://www.scsmsolutions.com/ freemanru (at) gmail (dot) com
    Thursday, September 22, 2011 3:37 PM
  • Anton, the base is AdminItem.Library!System.SolutionSettings, so the system is presumably simply denying admin access to non-admins. But it is a shame that there are many things like this in SCSM that only an admin can do, even when you try and grant access directly, as most users are not admins, but some need to be able to change settings.

     

    Thursday, September 22, 2011 6:57 PM
  • Then you must use this solution:

    http://support.microsoft.com/kb/2525307


    http://www.scsmsolutions.com/ freemanru (at) gmail (dot) com
    • Marked as answer by Rob.Ford Thursday, September 22, 2011 8:07 PM
    Thursday, September 22, 2011 7:59 PM
  • Interesting, thanks, Anton, I didn't know about that. It looks like that will work nicely from the examples, I'll check it out.
    Thursday, September 22, 2011 8:07 PM
  • Yes, all working now. Thanks again, Anton.

    The hotfix would not install, so I extracted the .sql file and ran directly. Running this then allowed the property to be updated by Advanced Operators:

    exec p_AddRestrictrictionToOperationInProfile  'AdvancedOperator', 'Object__Set', 'ExchangeWorkflowSettingsClass', 'ExchangePlayOnPhoneNumber', NULL, NULL

    "ExchangeWorkflowSettingsClass" is my singleton class and "ExchangePlayOnPhoneNumber" is the property that I wanted non-admins to change.

    Thursday, September 22, 2011 9:37 PM