Wednesday, April 29, 2015

OAM Error, MBean operation access denied. MBean: oracle.oam:type=Config Operation: retrieveMapPropertyArray(java.lang.String) Detail: Access denied. Required roles: Admin, executing subject: principals=[eidmwebadmin, OAMAdministrators, OAMSystemAdminGroup]



Error: java.lang.SecurityException: MBean operation access denied. MBean: oracle.oam:type=Config Operation: retrieveMapPropertyArray(java.lang.String) Detail: Access denied. Required roles: Admin, executing subject: principals=[eidmwebadmin, OAMAdministrators, OAMSystemAdminGroup]

This error comes because you choose to create an Admin group for OAM administration and named it something other than Administrators. The group has to be included in the WebLogic Roles and Policies to be allowed to have admin privileges to all MBEANS.

1>     Login to Weblogic à Click on “Security Realm”







2>     Click on myrealm








3>     Select “Roles and Policies”, expand Global Roles à Roles







4>     Select “Vie Role Conditions” for “Admin Roles.
The following screen shows an already added group “OAMAdministrators”. But you will need to select Add Conditions à Group à Provide Group Name in “Group Argument Name” à Finish




 
5>     Save. Restart the OAM Domain.

Have Fun....





1 comment:

  1. Thanks! This helped. Although it worked directly without the restart step.

    ReplyDelete