Environment
Situation
I got an error message: “You do not have sufficient permissions to perform this operation.”…
Resolution
Logged-in user must be a member of the Authenticore Admins Group. Verify that the logged-in user is a member of this group, or a member of a group belonging to the Authenticore Admins Group.
If you do not see this group in CN=Users:
Security Groups and Group membership not created/assigned during installation on Windows domain operating at Windows 2000 domain functional level(s).
Complete the following steps to create Security Groups and assing Group membership:
-
Open Active Directory Users and Computers.
-
Browse to the Users container.
-
Create a *Global Security Group named “Authenticore Admins”.
-
Assign users and groups to administer Authenticore Server, ensuring that your user account is a member of this group.
-
Create a Global Security Group named “NetIQ Advanced Authentication Framework Admins”.
-
Assign users and groups to administer/enroll Advanced Authentication users, ensuring that your user account is a member of this group.
-
Verify that the service account, “AuthenticoreService” exists and is a member of Domain Admins.
-
Reboot server.
Refer to your Domain Administrator if Universal, Global, or Local Domain group is required for your domain/forest. This will only affect your ability to add another group (such as Domain Admins or Enterprise Admins) to this new security group.