Privileged Account Manager 3.2
When configuring group access roles within PAM, the user receives the following browser dialog error when trying to access a dashboard:
You are not authorized to perform this operation.
This error reports that the logged-in user is unauthorized to perform the requested operation. If this error is received when trying to access a UI Console from the Administration Console, then it is likely the 'read' role is missing from the group role configuration. Adding the additional '<module>:read' role should permit this operation.
For example, when configuring a Command Control Role to "View the Command Control console," the 'cmdctrl:console' role is added to the group, but the Console loads blank or the error above is received in the browser.
If an additional Role is added to the group as 'cmdctrl:read' then the Console's request for the cmdctrl rules will be authorized and the Console will display the rules & policies.
To access the Command Control Console and view the rules, the following Roles would need to be configured on the group:
Insufficient 'read' privileges to retrieve the records needed to be displayed by the Console.
For more details regarding configuration of these roles, please refer to documentation:
For an example found in the forums with this issue, please refer to: