​Hello All,

I am trying to provision an account for a person using ISIM web services. When I submit the request, I get the following exception:

com.ibm.itim.ws.services.WSApplicationException: CTGIMS009E You do not have the authority to perform this operation.

However, when I request the account using itim console, it works perfectly fine. That means user account has the authority but it is not able to create using web services.

What could be the reason? Are there any special permissions the user needs for web services? Any help would be appreciated.

Best regards,

------------------------------
Jahanzaib Sarwar
------------------------------
​

Hi Jahanzaib...

The error could be due to some specific attribute(s) you're passing in the SOAP request.
You may want to test with a limited set of attributes (just the required attrs...like sn, cn, objectclass).
If this still doesn't work, you'll want to look at the ISIM logs (trace.log...) as the error your SOAP client is receiving might be a side effect of another error.

------------------------------
Grey Thrasher
IBM
------------------------------

Hi Grey,

Thank you for the response. Exactly this was the problem. I removed the extra attributes from provisioning policy and just passed cn, sn and givenname​. Also, I had an attribute in account defaults which I removed. I then tried to provision account again from SOAP client and it worked. The account was successfully provisioned. Now I will looked into adding further attributes.

Thank you very much.

Best regards,

------------------------------
Jahanzaib Sarwar
------------------------------

Original Message:
Sent: Sat August 10, 2019 10:55 AM
From: Grey Thrasher
Subject: ISIM Web Services Exception

Hi Jahanzaib...

The error could be due to some specific attribute(s) you're passing in the SOAP request.
You may want to test with a limited set of attributes (just the required attrs...like sn, cn, objectclass).
If this still doesn't work, you'll want to look at the ISIM logs (trace.log...) as the error your SOAP client is receiving might be a side effect of another error.

------------------------------
Grey Thrasher
IBM
------------------------------