Failed to load inventory. The current user 'NS Agent Identity' does not have required permission 'read' to load item
search cancel

Failed to load inventory. The current user 'NS Agent Identity' does not have required permission 'read' to load item

book

Article ID: 161970

calendar_today

Updated On:

Products

IT Management Suite

Issue/Introduction

The Symantec Management Platform logs are full of the following error: 

"Failed to load inventory. The current user 'NS Agent Identity' does not have required permission 'read' to load item" and  "Message dispatch failed for: id=36267906, from: add95918-8669-47c8-955d-3fdc8272b22a, to: 'Basic Inventory Capture Item' (1592b913-72f3-4c36-91d2-d4eda21d2f96)

The current user 'NS Agent Identity' does not have required permission 'read' to load item: 77c8ceca-9093-4cef-af21-68ddd9c13d86
[Altiris.NS.Exceptions.AeXUnauthorizedAccessException @ Altiris.NS]
at Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(String message)
at Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem item, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
at Altiris.NS.ItemManagement.Item.GetItem[T](Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
at Altiris.NS.ResourceManagement.DataClassImporter.LoadInventoryImpl(XmlReader reader, Boolean bProcessData, Boolean bForceSchemaValidation, Guid resourceGuidOverride)
Exception logged from:
at Altiris.Diagnostics.Logging.EventLog.ReportException(Int32 severity, String strMessage, String category, Exception exception, String footer)
at Altiris.NS.Logging.EventLog.ReportException(Int32 severity, String strMessage, String category, Exception exception)
at Altiris.NS.ResourceManagement.DataClassImporter.LoadInventoryImpl(XmlReader reader, Boolean bProcessData, Boolean bForceSchemaValidation, Guid resourceGuidOverride)
at Altiris.NS.ResourceManagement.DataClassImporter.LoadInventory(Guid resourceGuid, XmlReader reader)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.ImportDataClassNode(MessagingResource fromResource, XmlTextReader xmlReader, ResourceImporter resourceImporter, DataClassImporter inventoryImporter)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.ImportDataClassData(MessagingResource fromResource, XmlTextReader xmlReader, ResourceImporter resourceImporter)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.OnMessageImpl(String message, Boolean useFilename)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.OnMessageInternal(String message, Boolean useFilename)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.DispatchWithinContext(String message, Boolean useFilename, IItem item, IItemMessaging iim, MessageHeader header)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.DispatchWithinContext(String message, Boolean useFilename, Int64 eventId, MessageHeader header)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.Dispatch(String message, Boolean useFilename, Int64 eventId, MessageHeader& header)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.PerformDispatch(DispatchSlot slot)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.DispatchSingleNse(DispatchSlot slot)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.WorkerDispatchStep(DispatchSlot slot, IAutoCallContextSnapshot snap)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.WaitAndDispatch(ThreadDatabaseContext`1 ctx, WaitHandle[] waiters, DispatchSlot slot, IAutoCallContextSnapshot snap)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.WorkerLoop(Object state)
at System.Threading.ThreadHelper.ThreadStart(Object obj)
**CEDUrlStart** :http://entced.symantec.com/entt?product=SMP&version=7.5.3153.0&language=en&module=dc31aIEbqcPtSzvxof07yy4m/25nZ6dNWNe+K7nDBCUvugzIpInKeusJ0JygdHLcfklHl866FTlxNkAtkGp6Pd8jlrj6ogvLyHf3juYaBjw=&error=1779626757&build=**CEDUrlEnd**


Message dispatch failed for: id=36267906, from: add95918-8669-47c8-955d-3fdc8272b22a, to: 'Basic Inventory Capture Item' (1592b913-72f3-4c36-91d2-d4eda21d2f96)
Failed to load inventory.
[Altiris.NS.Exceptions.AeXException @ Altiris.NS]
at Altiris.NS.ResourceManagement.DataClassImporter.LoadInventoryImpl(XmlReader reader, Boolean bProcessData, Boolean bForceSchemaValidation, Guid resourceGuidOverride)
at Altiris.NS.ResourceManagement.DataClassImporter.LoadInventory(Guid resourceGuid, XmlReader reader)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.ImportDataClassNode(MessagingResource fromResource, XmlTextReader xmlReader, ResourceImporter resourceImporter,
DataClassImporter inventoryImporter)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.ImportDataClassData(MessagingResource fromResource, XmlTextReader xmlReader, ResourceImporter resourceImporter)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.OnMessageImpl(String message, Boolean useFilename)
at Altiris.NS.StandardItems.Messaging.InventoryCaptureItem.OnMessageInternal(String message, Boolean useFilename)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.DispatchWithinContext(String message, Boolean useFilename, IItem item, IItemMessaging iim, MessageHeader header)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.DispatchWithinContext(String message, Boolean useFilename, Int64 eventId, MessageHeader header)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.Dispatch(String message, Boolean useFilename, Int64 eventId, MessageHeader& header)
The current user 'NS Agent Identity' does not have required permission 'read' to load item: 77c8ceca-9093-4cef-af21-68ddd9c13d86
[Altiris.NS.Exceptions.AeXUnauthorizedAccessException @ Altiris.NS]
at Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(String message)
at Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem item, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
at Altiris.NS.ItemManagement.Item.GetItem[T](Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
at Altiris.NS.ResourceManagement.DataClassImporter.LoadInventoryImpl(XmlReader reader, Boolean bProcessData, Boolean bForceSchemaValidation, Guid resourceGuidOverride)
Exception logged from:
at Altiris.Diagnostics.Logging.EventLog.ReportException(Int32 severity, String strMessage, String category, Exception exception, String footer)
at Altiris.NS.Logging.EventLog.ReportException(Int32 severity, String strMessage, String category, Exception exception)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.Dispatch(String message, Boolean useFilename, Int64 eventId, MessageHeader& header)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.PerformDispatch(DispatchSlot slot)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.DispatchSingleNse(DispatchSlot slot)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.WorkerDispatchStep(DispatchSlot slot, IAutoCallContextSnapshot snap)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.WaitAndDispatch(ThreadDatabaseContext`1 ctx, WaitHandle[] waiters, DispatchSlot slot, IAutoCallContextSnapshot snap)
at Altiris.NS.ClientMessaging.EventQueueDispatcher.WorkerLoop(Object state)
at System.Threading.ThreadHelper.ThreadStart(Object obj)
 

Cause

CEM uses an account called NS Agent Identity. The permissions for this account had been removed from the "Resource and Data Class Settings" folder in the console. The NS Agent Identity account should have "Read" permissions assigned at this level. They are then inherited down several data classes.

Resolution

Open the console and do the following:

1.  Settings> Security>Permissions to open the security role manager
2.  Set the role to administrator
3.  Set the view to "All Items"
4.  Open Settings>Notification Server>Resource and Data Class Settings
5.  In the right pane click the "Advanced" button at the bottom of the page
6.  If the NS Agent Identity doesn't exist (because broken inheritance) or does not have read rights assigned you must add them.
7.  Click the + button to add a trustee
8.  Change to the Group dropdown to accounts.
9.  Select the NS Agent Identity and click OK button
10. Under the same "Permissions for: Data Classes" window, we gave it "Read" rights as well "Read Resource Data" under "Resource Management Permissions" and save changes.