Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Some article numbers may have changed. If this isn't what you're looking for, try searching all articles. Search articles

NetWorker NMC: Hosts tab reports "User does not have 'Create Security Settings' or 'Configure NetWorker' privilege to create CP resource NSR CP interface" for AD admins

Summary: After configuring AD with NetWorker 19.4.0.x we are able to log into the NMC but the hosts tab throws "Permission Denied, user 'USER_NAME' on 'NSR_NAME' does not have 'Create Security Settings' or 'Configure NetWorker' privilege to create CP resource NSR CP interface" ...

This article may have been automatically translated. If you have any feedback regarding its quality, please let us know using the form at the bottom of this page.

Article Content


Symptoms

  • The NetWorker server has been configured to integrate Active Directory (AD/LDAP) authentication.
  • The AD user/group Distinguished Name (DN) has been specified in the NetWorker Management Console's (NMC) 'Server->User Groups' "Application Administrators" and "Security Administrators" user group's 'External Roles' fields.
  • The AD user is able to log into the NMC, connect to the server, and otherwise manage the NetWorker server.
  • Connecting to the "Hosts" tab throws the error:
"Permission Denied, user 'USER_NAME' on 'NSR_NAME' does not have 'Create Security Settings' or 'Configure NetWorker' privilege to create CP resource NSR CP interface"
  • Once the error is cleared the "Hosts" tab functions normally.

Cause

This issue was determined to be a code defect by NetWorker engineering.
Impacted: NetWorker 19.6.0.x and prior.

Resolution

Upgrade to NetWorker 19.6.1.3 (or later).

https://www.dell.com/support/home/product-support/product/networker/drivers

Workaround:
This issue poses no functional impact; however, there is a workaround for avoiding this error:
1. From Networker Administration --> Server --> User Groups.
2. Double click on "Application Administrators".
3. Add the AD user name in the "Users" section and save it. (Only the user name. NOT domain).
4. Perform the same operation for the "Security Administrators" group.

Article Properties


Affected Product

NetWorker

Last Published Date

16 Oct 2023

Version

3

Article Type

Solution