Event 4216 : Access denied. User is not in a role that allows '{ API } Can Use Extended API Features.

Description

Error Message

Event 4216: Storage Online Access denied. User is not in a role that allows '{ API } Can Use Extended API Features'. User: 'DOMAIN\user'
V-437-4216

Cause

The Windows user running a third party application does not have appropriate permissions to access the Enterprise Vault API.

Resolution

If you encounter issues with this type of account, you can assign one of the following Enterprise Vault Roles (Refer Additional information), which provides minimal access to the Enterprise Vault environment:

PST Administrator
Storage Administrator

For more information on predefined roles, please refer to the Administrator's Guide

Issue/Introduction

When using a third party application to perform a search in Enterprise Vault, this error message might be generated if the user account does not have the correct permissions applied.

Additional Information

Roles and the Enterprise Vault Administration Console

Table: Administration Console features and actions shows the Administration Console features and actions that are available to the supplied administrator roles.

Note:

The predefined Placeholder Application role does not allow access to the Administration Console.

Table: Administration Console features and actions

Role	Administration Console containers available	Administration Console actions available
Discovery Search Service Administrator	Services: Archive Discovery Search Service	Install or move Archive Discovery Search Service database Configure Archive Discovery Search Service Configure Request Endpoints Customize Result Locations
Domino Administrator	Targets: Domino Policies: Domino; Retention and Classification Services: Task Controller Tasks: Domino Mailbox Archiving; Domino Journaling; Domino Provisioning Archives: Domino Mailbox; Domino Journal	Enable Mailbox Disable Mailbox Site Property tabs: General; Archiving Settings; Site Schedule; Records Advanced Features Domino forms Classification
Domino Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following roles: IMAP Administrator NSF Administrator Search Administrator
Exchange Administrator	Targets: Exchange Policies: Exchange; Retention and Classification Services: Task Controller Tasks: Mailbox Archiving; Public Folder; Exchange Journaling; Exchange Provisioning Archives: Exchange Journal; Exchange Mailbox; Public Folder; Shared	Enable Mailbox Disable Mailbox Site Property tabs: General; Archiving Settings; Site Schedule; Records Advanced Features Exchange Message Classes Classification
Exchange Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following roles: IMAP Administrator Search Administrator
Extension Content Provider Administrator	Extensions: All extensions operations except for creation Archives: Shared archives and custom archives Policies: Retention and Classification	Site Property tabs: Site Schedule; Records Manage Extension Content Providers Manage Shared Archives Classification
File Server Administrator	Targets: File Server Policies: File Archiving; Retention and Classification Services: Task Controller Tasks: File Server Archiving Archives: File System; Shared	Site Property tabs: General; Archiving Settings; Site Schedule; Records Advanced Features Classification
File Server Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following role: Search Administrator
IMAP Administrator	Client Access: IMAP; Search Policies: IMAP; Search Services: Task Controller Tasks: Client Access Provisioning
IMAP Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following role: Search Administrator
Indexing Administrator	Services: Indexing; Task Controller; Storage; Archive Discovery Search Service Tasks: Indexing Archives: All types of archive Indexing: All Index Servers	Archive Discovery Search Service Advanced Features Manage Indexes Site Property tabs: Indexing; Advanced
Messaging Administrator	Targets: Exchange; Domino; SMTP Policies: Exchange; Domino Journaling; Retention and Classification; SMTP Services: Task Controller Tasks: Mailbox Archiving; Public Folder; Exchange Journaling; Exchange Provisioning; Domino Mailbox Archiving; Domino Journaling; Domino Provisioning, SMTP Archiving; SMTP Provisioning Archives: All types of archive	Enable Mailbox Disable Mailbox Site Property tabs: General; Archiving Settings; Site Schedule, Records, RMS Import NSF Advanced Features Exchange Message Classes Domino forms Classification
Messaging Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following roles: Domino Administrator Exchange Administrator SMTP Administrator
NSF Administrator	Policies: Domino Mailbox; Domino Desktop; Retention and Classification Archives: Import NSF	Site Property tabs: Records Import NSF Domino forms Classification
Power Administrator	Targets: All targets Policies: All policies Services: All services Tasks: All tasks Archives: All types of archive Vault stores: All vault stores Indexing: All Index Servers and Index Server groups Personal Store Management: All functions	Archive Discovery Search Service Advanced Features Classification Disable Mailbox Disable Workspace Domino forms Enable Mailbox Enable Workspace Exchange Message Classes Export Archive Import Archive Import NSF Manage Indexes Site Property tabs: All tabs Update Service Locations
Power Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following roles: Exchange Administrator Extension Content Provider Administrator Indexing Administrator SMTP Administrator
PST Administrator	Policies: PST Migration; Retention and Classification Services: Task Controller Tasks: Mailbox Archiving; PST Locator; PST Collector; PST Migrator Vault stores: All vault stores Personal Store Management: All functions	Site Property tabs: General; Site Schedule; Records Import Archive Export Archive Advanced Features Classification
Search Administrator	Client Access: Search Policies: Search Services: Task Controller Tasks: Client Access Provisioning	Site Property tab: Search Define Search Provisioning Group Define Search Policy Configure Client Access Provisioning Task
SharePoint Administrator	Targets: SharePoint Policies: SharePoint; Retention and Classification Services: Task Controller Tasks: SharePoint Archives: SharePoint; Shared	Enable Workspace Disable Workspace Site Property tabs: General; Archiving Settings; Site Schedule; Records Advanced Features Classification
SharePoint Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following role: Search Administrator
SMTP Administrator	Targets: SMTP Policies: SMTP; Retention and Classification Tasks: SMTP Archiving Services: Task Controller Archives: All types of archive	Site Property tabs: General; Archiving Settings; Records; RMS Classification
SMTP Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following role: Search Administrator Note: Accounts that have the SMTP Administrator role must be local administrators on Enterprise Vault servers and on computers on which they run the Administration Console.
Storage Administrator	Tasks: Indexing Services: Storage; Indexing; Task Controller Archives: All types of archive Vault stores: All vault stores Indexing: All Index servers and Index Server groups	Site Property tabs: General; Archiving Settings; Site Schedule; Storage Expiry Import Archive Export Archive Advanced Features
Storage Administrator	By default, this role also provides access to the Administration Console containers and actions that are available to the following role: Indexing Administrator

Welcome to "KB Articles"