Monday, May 19, 2014

OAM 11g R2 PS2 (11.1.2.2) Cannot Open The Federation Settings Page, MBean Operation Access Denied

After I changed my system store to OUD via oamconsole
and
configured that as Security Provider in security realms in weblogic console.
I was receiving the below error message.

Cannot Open The Federation Settings Page, MBean Operation Access Denied

This was stopping to access any federation settings.

The fix for it


1. Log in to the WebLogic Administration Server Console
2. In the left pane of the console, click Security Realms.
3. On the Summary of Security Realms page, click myrealm under the Realms table.
4. On the Settings page for myrealm, click the Roles & Policies tab.
5. On the Realm Roles page, expand the Global Roles entry under the Roles table. This brings up the entry for Roles.
6. Click the View Role Conditions link next to Admin Role
7. On the Edit Global Roles page, under Role Conditions, click Add Conditions.
8. On the Choose a Predicate page, select Group from the predicates list and click Next.
9. On the Edit Arguments Page, specify the admin group specified in OUD store (while setting it to system store in oamconsole) in the Group Argument field and click Add.
10. Click Finish to return to the Edit Global Rule page.
11. The Role Conditions now show the the admin group specified in OUD store Group as an entry.
12. Click Save to finish adding the Admin role to the admin group specified in OUD store Group.


Screen shot below