Symptoms
- The NetWorker server has been configured to integrate Active Directory (AD/LDAP) authentication.
- The AD user/group Distinguished Name (DN) has been specified in the NetWorker Management Console's (NMC) 'Server->User Groups' "Application Administrators" and "Security Administrators" user group's 'External Roles' fields.
- The AD user is able to log into the NMC, connect to the server, and otherwise manage the NetWorker server.
- Connecting to the "Hosts" tab throws the error:
"Permission Denied, user 'USER_NAME' on 'NSR_NAME' does not have 'Create Security Settings' or 'Configure NetWorker' privilege to create CP resource NSR CP interface"
- Once the error is cleared the "Hosts" tab functions normally.
Cause
This issue was determined to be a code defect by NetWorker engineering.
Impacted: NetWorker 19.6.0.x and prior.
Resolution
Upgrade to NetWorker 19.6.1.3 (or later).
https://www.dell.com/support/home/product-support/product/networker/drivers
Workaround:
This issue poses no functional impact; however, there is a workaround for avoiding this error:
1. From Networker Administration --> Server --> User Groups.
2. Double click on "Application Administrators".
3. Add the AD user name in the "Users" section and save it. (Only the user name. NOT domain).
4. Perform the same operation for the "Security Administrators" group.
Affected Products
NetWorker