Creating Sync Rules in R2 RRS feed

  • Question

  • I am trying to create a sync rule in my shiny new R2 system (into which I've imported the MAs, MPRs, etc. from my RTM system). I am getting an access denied error when I submit the sync rule. My account is a member of the Adminstrators set.

    Error processing your request: The operation was rejected because of access control policies.
    Reason: The operation failed as a result of insufficient access rights.
    Attributes: msidmOutboundIsFilterBased
    Correlation Id: a549fc8b-61ce-44b0-809c-cf65c8146c35
    Request Id:
    Details: No policy grants the Requestor permission to complete all changes.

    Filter-based sync rules are new in R2. Has anyone encountered this, or more importantly know how to fix?

    Wednesday, November 28, 2012 5:11 PM


  • I think I did this to myself. When I looked back through the PolicyChanges.xml file created by Compare-FIMConfig, I see that some of the new R2 attributes were removed from MPRs granting permissions to administrators, etc. I did not review all the changes in PolicyChanges.xml before applying them. Rolling back now.
    • Marked as answer by PeteA Wednesday, November 28, 2012 7:01 PM
    Wednesday, November 28, 2012 7:01 PM