Home
  •  

Event 1011: The requesting user is not authorized to complete the operation.

Microsoft.SystemCenter.VMMSSP.Event.1011 (Rule)

Knowledge Base article:

Summary

This alert is generated when a service account does not have sufficient permissions in the self-service portal. Any of five similar VMMSSP events (event 1007, 1008, 1011, 1012, or 1013) may trigger this alert.

Configuration

Permissions issue.

Causes

Event 1007: The application pool identity used by the self-service portal is not a member of the DCIT Admin user role. The self-service portal may generate this event when it processes a job.

Events 1008, 1011, 1012, and 1013: The service account (used by the Virtual Machine Manager Self-Service Portal 2.0 service) is not a member of the DCIT Admin user role. The self-service portal may generate these events under conditions such as the following:

* Event 1008: When retrieving the status of a virtual machine or when retrieving properties of VMM library servers or shares.

* Event 1012 or 1013: When setting properties related to virtual machine hosts, such as when assigning a newly created virtual machine to a host.

Resolutions

In the self-service portal, add the service account (or application pool identity, if appropriate) to the DCIT Admin user role, and then restart the Message Queuing service.

Additional

See the Virtual Machine Manager Self-Service Portal 2.0 SP1: Operations Guide or the Virtual Machine Manager Self-Service Portal 2.0 SP1: Datacenter Administration Guide.

External

www.microsoft.com\ssp

Element properties:

TargetMicrosoft.SystemCenter.VMMSSP.ProvisioningService
CategoryEventCollection
EnabledTrue
Event SourceVirtual machine Manager Self Service Portal
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Event {0}: The requesting user is not authorized to complete the operation.

Event ID: {0}
Event Source: {1}
Computer Name: {2}
User Name: {3}
Event Description: {4}
Event LogVirtual Machine Manager SSP

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SystemCenter.VMMSSP.Event.1011" Enabled="true" Target="Microsoft.SystemCenter.VMMSSP.ProvisioningService" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Virtual Machine Manager SSP</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>^(1011|1007|1008|1012|1013)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Virtual machine Manager Self Service Portal</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertName/>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Microsoft.SystemCenter.VMMSSP.Event.1011.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventNumber$</AlertParameter1>

        <AlertParameter2>$Data/EventSourceName$</AlertParameter2>

        <AlertParameter3>$Data/LoggingComputer$</AlertParameter3>

        <AlertParameter4>$Data/UserName$</AlertParameter4>

        <AlertParameter5>$Data/EventDescription$</AlertParameter5>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>