Resolution
Directory and Resource Administrator 8.0
symptom
Error: The Assistant Admin does not have enough powers to run this 'CloneExceptionGet' operation.
symptom
Assistant Admins can clone user accounts only after acknowledging an error message.
cause
A new feature in DRA allows an administrator to specify attributes that cannot be cloned as "Clone Exceptions." Since these attributes are not displayed in the Clone User Wizard, an Assistant Admin performing cloning operations must be given access to stored clone exceptions, even if no clone exceptions exist. Any attempt to clone a user by an Assistant Admin without the View Clone Exceptions power produces the error message.
fix
After acknowledging the error message, the Assistant Admin can successfully complete the cloning process. Any attributes previously specified as clone exceptions by DRA Administrators will not be cloned.
To prevent the error message from displaying, grant the "View Clone Exceptions" power to the Assistant Admin in addition to the other powers needed to clone the user. You can also grant the role "Clone User With Mailbox," because it includes the necessary power.
note
An enhancement request has been opened to development for a future version of DRA. The necessary permissions to view clone exceptions would be included when using other powers to grant the ability to clone.