Tuesday, October 04, 2011

Insufficient access rights to perform the operation

In SharePoint 2010 I have profile export configured to export certain data from SharePoint to AD. Everything was working fine, except that for certain users the export failed with the error "Insufficient access rights to perform the operation". Upon further investigation, I found that these users where given elevated privileges some point in time. Doing so removed the inherit permission from the parent object. Fixing this resolved the issue.
To give this permission:
  1. Double click on the user with the issue and select the "Security" tab (if this tab is not visible, right click on the users folder on the left pane and select "View" and select the "Advanced Features" option.
  2. On the "Security" tab click on the "Advanced" button
  3. Check the "Include Inheritable permission from this object's parent" check box
  4. Close all the dialogs by clicking "Ok" button twice
  5. Repeat steps 1 through 4 for all users with this issue
Next time the user profile is synchronized the data will be updated to AD.

No comments: