One of the following symptoms is observed:
1. A process has failed to run. The application server log reports that the user does not have the required permissions/rights:
INFO [stdout] (Appian Work Item - XXXXX - ProcessExecXX : ExpressionGroupRequest) PrivilegeException[null=>null]: User Does Not Have Rights to Perform this Operation
YYYY-MM-DD HH:mm:ss [Appian EmailHandlerBean - 97] ERROR com.appiancorp.messaging.MessagePublisherServiceImpl - Could not process received emailcom.appiancorp.security.authz.AuthorizationException: The user [xxxxx] does not have sufficient privileges to perform the requested action because they are not in any role. (APNX-1-4188-001)
There are two possible reasons for this error:
Check the permissions of the process initiator to ensure the user has sufficient permissions to start the process. Check the status of the process designer to make sure the user has not been deactivated.
If the initiator does not have the correct permissions, add the user to the required group(s). If the process is still failing, temporarily add this user to a new group and then remove it. Remember to verify that the permissions granted to new group match those required by the process model.
If the process designer was deactivated, either reactivate the user or rebpulish the model using an active user account with the correct permissions.
Note: To prevent this issue from occurring in the future, configure the process model to run as the Process Designer. To access this setting:
When the process runs as the Process Designer, Appian recommends that process models be imported using a service account of type System Administrator that will never be deactivated.
This article applies to all versions of Appian.
Last Reviewed: March 2020
© 2020 Appian. All rights reserved.