Resolution
fact
Directory and Resource Administrator 6.50
symptom
Error: 'You do not have the power to create the User userid.' When Attempting to Clone a User Account from the Web Console
symptom
Assistant Admins are able to clone user accounts in the MMC interface but are unable to do so using the web console, even when referencing the same template account.
cause
This error occurs if the user template for the clone operation is not in the same container (Organization Unit or managed domain) as the Target Container for create operations specified in the ActiveView rule. The Web Console attempts to clone the user account in the same container as template account and since this container is not included in the ActiveView definition, the above error message is returned.
fix
Directory and Resource Administrator 6.50
symptom
Error: 'You do not have the power to create the User userid.' When Attempting to Clone a User Account from the Web Console
symptom
Assistant Admins are able to clone user accounts in the MMC interface but are unable to do so using the web console, even when referencing the same template account.
cause
This error occurs if the user template for the clone operation is not in the same container (Organization Unit or managed domain) as the Target Container for create operations specified in the ActiveView rule. The Web Console attempts to clone the user account in the same container as template account and since this container is not included in the ActiveView definition, the above error message is returned.
fix
One workaround is to clone user accounts which are in the same container as the one specified in the Target Container rule or create another Target Container rule to include the OU or domain of the template account.
This issue is resolved in Directory and Resource Administrator 6.6.
Additional Information
Formerly known as NETIQKB11051