"Access Denied" Error on Various Operations When Using Limited Account

I am working in Sailpoint IdentityIQ (an enterprise application integration platform) which has a semi-limited account that it uses to provision/deprovision AD Groups to AD Users.

Quite often I will get an "Access is denied" error when trying to perform an operation involving certain users or groups, but I typically do not know WHY I cannot perform the operation.

My questions are:

  • For a specific operation that receives this error, is there a way to find out WHY the error occurred?

  • For the integration account in question, is there any way to find out all (or even some) of the restrictions that it has on it?

1 Answer

  1. For the more detailed information regarding the error, you can enable IQService log, which will print more information regarding the error.
  2. For information regarding the permission regarding the service account, you need to reach out to the directory services team.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Alexander Ross

Alexander Ross

Gaming, Esports & Interactive Media Writer

Alexander Ross has covered the video game industry for a decade, writing deep dives on game design, esports tournaments, VR developments, and gaming culture.

Share this article
Twitter Facebook Pinterest