Azure User Import - API rules

[Jim]

Hi, Since setting the rules stated in the wiki our user import has not been able to assign roles to users, it states the following

Error returned from sysOptionGet The following rights [manageSystemSettings] in Group C are needed to invoke the method admin::sysOptionGet

Error: You cannot create or update the role as you do not have sufficient permissions to set the system rights.

 

The API key has all the rules the wiki says as shown below but I am having to manually add roles to new starters, can anyone advise? The user import also has the 'userimport role and any it assigns to users

activity:profileImageSet
admin:keysafeGetKey
admin:sysOptionGet
admin:userAddGroup
admin:userAddRole
admin:userCreate
admin:userDeleteGroup
admin:userProfileSet
admin:userSetAccountStatus
admin:userUpdate
data:entityAddRecord
data:entityUpdateRecord
data:queryExec
session:getSystemLicenseInfo

[Steve Giller]

The wiki page for the Azure User Import has a section on Roles which should assist.

There are two basic areas to look into:

• does the User against whom the API Key is set have the User Import Role?
• any roles you try and assign to the user accounts being imported must be assigned to the user account logging in and running the import
  e.g. a User without the "Admin Role" cannot assign it to any other User.

If both of these criteria are covered please raise a Support Request

[Jim]

Hi Steve, I will raise a support request as these are all set and I must of read that documentation numerous times yesterday trying to see what I had set up different 

[MichelleReaney]

On 8/3/2023 at 9:27 AM, Jim said:

Hi, Since setting the rules stated in the wiki our user import has not been able to assign roles to users, it states the following

Error returned from sysOptionGet The following rights [manageSystemSettings] in Group C are needed to invoke the method admin::sysOptionGet

Error: You cannot create or update the role as you do not have sufficient permissions to set the system rights.

 

The API key has all the rules the wiki says as shown below but I am having to manually add roles to new starters, can anyone advise? The user import also has the 'userimport role and any it assigns to users

activity:profileImageSet
admin:keysafeGetKey
admin:sysOptionGet
admin:userAddGroup
admin:userAddRole
admin:userCreate
admin:userDeleteGroup
admin:userProfileSet
admin:userSetAccountStatus
admin:userUpdate
data:entityAddRecord
data:entityUpdateRecord
data:queryExec
session:getSystemLicenseInfo

Hi Jim, 

Did you get an answer for this? We are also getting this error.

2023/09/07 16:42:32 [ERROR] Could not retrieve System Setting [api.xmlmc.queryExec.maxResultsAllowed]: The following rights [manageSystemSettings] in Group C are needed to invoke the method admin::sysOptionGet
2023/09/07 16:42:32 [ERROR] Error returned from sysOptionGet The following rights [manageSystemSettings] in Group C are needed to invoke the method admin::sysOptionGet

 

I have noticed that our User Import role does not have the Manage System Settings permissions in configuration - only manage keysafe

 

The admin role has Manage System Settings under configuration, I think that is what is missing. I'll log a ticket if this is what it is. 

[MichelleReaney]

Actually - I have just create a new role - same as the User Import one except added Manage System Settings under configuration.  Assigned that to the user with the API and the error has gone