User is unable to restore archived item due to automatically set "Deny" permissions on the archive
Article ID: 100005290
Updated On:
Description
Error Message
Dtrace of RetrievalTask shows:
7916 09:18:53.614 [4352] (RetrievalTask) <4036> EV:M CRestorationAgent::RetrieveMarkedItems (Exit) |Client request refused due to insufficient privileges, user %1 attempted to access the Vault: Vault Name: %2 Vault Id: %3 but did not have %4 access [0xc0040aad] |
Cause
The user has "Granted" permissions automatically set on their archive; however, the user also is a member of a group that has "Denied" access permissions automatically assigned at the archive level as well.
The automatically set permissions are read from the Mailbox Rights on the users Active Directory account. These rights are read and set each time the mailbox is synchronized in Enterprise Vault.
Resolution
Remove the rights for the group that is denied access to the affected users mailbox to resolve issue as "Denied" permissions override "Granted" permissions.
Issue/Introduction
