Event ID 4216: "Access denied. User is not in a role that allows '{STO} Can read item holds in any archive'.

book

Article ID: 100033015

calendar_today

Updated On:

Description

Error Message

Log Name: Symantec Enterprise Vault
Source:  Enterprise Vault
Event ID: 4216
Task Category: Storage Online
Level: Warning
Description:
Access denied. User is not in a role that allows '{STO} Can read item holds in any archive'.
User: 'EVLab\ntservices'

V-437-4216

Cause

Using an account other than the VSA as the Identity to run the EVAMS in an EV DA installation fails to place or remove holds due the account not having the proper Roles-Based Administration permissions.

Resolution

Assign the user the 'Storage Administrator' role in the Enterprise Vault Authorization Manager.

1. Login to the EV server as the VSA.
2. Open the Enterprise Vault Power Shell.
3. Enter the following command format, replacing "DA_Account" with the account running as the Identity of the EVAMS and replacing "EVServerName" with the name of the EV server. Press the Enter key to execute the command.

Add-EVRBARoleMember -Identity "Storage Administrator" -Members "DA_Account" -EVDirectoryServer "EVServerName"

4. Exit the EV PowerShell window upon successful completion of the above command and log off of the EV Server.
 

Issue/Introduction

When using an account other than the Vault Service Account (VSA) as the Identity for the Enterprise Vault Accelerator Manager Service (EVAMS) on an Enterprise Vault (EV) Discovery Accelerator (DA) server, the below error message might be generated if the user account does not have the correct permissions applied.