IT40112: SINGLE FILE RESTORE IS FAILING IF USER DOES NOT HAVE THE NECESSARY PERMISSIONS

APAR status

• Closed as program error.

Error description

• On IBM Spectrum Protect Plus, a single file restore is not
  working if the User initiating the restore does not have
  SUPERUSER role and the assigned resource group does not have
  permissions set to 'ALL' for the resource 'JOB'.
  
  When starting a single file restore job, the following error
  message will show up:
   Error: You do not have the necessary permissions to carry out
          the requested operation.
          Contact your administrator to ensure the required roles
          and resource groups are assigned to your user account.
  
  The server audit log shows:
   <timestamp>,<IP_address>,<LocalUser>,,Delete,Deletion of
     resource at [/api/endeavour/policy] failed. Error code (500).
   <timestamp>,<IP_address>,<LocalUser>,,Create,Creation of
     resource POLICY "onDemandRestoreFile_<JobID>" failed.
     Error code (403).
  

Local fix

• na
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.x.                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in IBM Spectrum Protect Plus levels    *
  * 10.1.9.3 and 10.1.10. Note that this is subject to change at *
  * the discretion of IBM.                                       *
  ****************************************************************
  

Problem conclusion

• IBM Spectrum Protect Plus Create Resource Group page has been
  fixed.  It will provide the option to add Job > Hypervisor File
  Recovery resource to the resource group.   The Job > Hypervisor
  File Recovery resource is required to perform file restores.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• GUI
  

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels