Compliance Job fails due to missing permissions for a custom property class

When compliance rules or remediation details use properties from a custom property class, the user running the Compliance Job must be assigned permissions for the property class and for the relevant property class instances. Without these permissions, the job fails with the "setName() not supported for base BlValues" error message.

To resolve this issue, assign permissions to the user's role within the relevant custom property classes and within the relevant instances of each property class.

For example, for CIS Compliance Jobs based on Compliance Content templates, you must add permissions for your user in the CIS Properties class and in the Remediation Properties class. Below are the steps for performing this task.

  1. To open the Property Dictionary in the BMC Server Automation Console, select Configuration > Property Dictionary View.
  2. In the Property Dictionary, navigate to the Custom Property Classes node and expand it.
  3. Add permissions for your user to the relevant property class (in this example, the CIS Properties class):
    1. Right-click CIS Properties and select Properties.
    2. In the Properties dialog box, click the Permissions tab.
    3. Above the Access Control List, click the Add Entry button.
    4. In the Add New Entry dialog box, select the role for your user.
    5. Select the PropertyClass.* authorization and use the arrow button to transfer it to the list of selected authorizations.
    6. Click OK in the Add New Entry dialog box and again in the Properties dialog box.
  4. Add permissions for your user to the relevant instances of the property class. Repeat the following steps for each relevant instance:
    1. In the Property Dictionary, click the Instances tab on the right.
    2. Right-click the relevant instance and select Edit.
    3. In the Modify Instance dialog box, click the Permissions tab.
    4. Above the Access Control List, click the Add Entry button.
    5. In the Add New Entry dialog box, select the role for your user.
    6. Select the PropertyInstance.* authorization and use the arrow button to transfer it to the list of selected authorizations.
    7. Click OK in the Add New Entry dialog box and again in the Modify Instance dialog box.
  5. Repeat steps 3 and 4 for the Remediation Properties class.

The following video demonstrates how to add permissions for your user in the CIS Properties class:

  https://youtu.be/MnJRRnuDoHY

See also Knowledge Article 000119595.

Was this page helpful? Yes No Submitting... Thank you

Comments