Can't remove systemadministrator role.

(0) Share

Report

Posted on by Rdobryanskyy1

Hi all,

I am in the role of system administrator. I have created a copy of this role (because for some historical things, everyone needed to be admins to do something). Now because all the users are admins, I want to remap all of them to the custom role which is a copy of system administrator, and once I have some spare time, I will start cutting the privileges. But I have been faced with the issue that sounds like:

Insufficient permissions.
RoleService :: VerifyCallerPrivileges failed. User: xxxxxxxxxxx, UserBU: xxxxxxxxxx, PrivilegeName: prvDeleteAccount, PrivilegeId: xxxxxxxx-account: xxxxxx-bd: Global xxxxxxx, MissingPrivilegeCount: 1 When contacting support, provide technical details.
Activity ID: xxxxxxxxxx
Timestamp: Mon Nov 01 2021 16:06:12 GMT + 0200 (Eastern European Standard Time)

any ideas on how can I remove that role?

Thanks

All responses (3)

Answers (0)

Sort by

Suggested answer

Ayaka Iwai Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

According to error message, the user doesn't have delete privilege for Account entity.

Please assign the Account deletion privilege to the user.
Rdobryanskyy1 5 on at

Like (0)

Report
Copy link

Link copied!

But the user is a system administrator of the entire org. Could it be that the AD is the one responsible to set these rules?
Suggested answer

Rdobryanskyy1 5 on at

Like (0)

Report
Copy link

Link copied!

so the issue was in the local AD. Once that was fixed, I was able to remove roles.