Permissions Error Occurrs When Adding Accounts as Search Service Administrators

Summary

As part of the installation prerequisites, RecordPoint requires that some accounts have administrator access to a search service to be used by RecordPoint. When adding the users as administrators, an error dialogue displays with the message "User does not have permission to perform this action".

In the SharePoint ULS logs the following error is described:

System.Data.SqlClient.SqlException: User does not have permission to perform this action.
    at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
     at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
     at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
     at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
     at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite)
     at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean asyncWrite)
     at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion, String methodName, Boolean sendToPipe, Int32 timeout, Boolean asyncWrite)
     at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
     at Microsoft.Office.Server.Data.SqlSession.ExecuteNonQuery(SqlCommand command)
     at Microsoft.Office.Server.Data.SqlDatabaseManager.GrantAccess(String user)
     at Microsoft.Office.Server.Search.Administration.SearchDatabase.GrantAccess(String username, String role)
     at Microsoft.Office.Server.Search.Administration.SearchDatabase.SynchronizeAccessRules(SearchServiceApplication searchApp)
     at Microsoft.Office.Server.Search.Administration.SearchServiceApplication.SynchronizeDatabases()
     at Microsoft.SharePoint.ApplicationPages.ServiceApplicationPermissions.OkButton_Click(Object sender, EventArgs e)
     at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Resolution

The error indicates that the system does not have access to the search databases to add new accounts to the search service databases with the 'SPSearchAdmin' role. This may be caused by some scripts used to create the environment. To resolve the issue, add the members of the WSS_WPG group as owners for all databases for the search service to be configured, and then return the Central Administration to add the accounts back to the search service.

Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.
Powered by Zendesk