-
Title
First initial ARS sync fails in Production -
Description
The ARS sync project creation succeeds, but when running first ARS initial sync, the sync fails with the error below:
ErrorMessages = (2018-10-07 21:08:54.087) [2134003] Error executing synchronization.
[1777018] Error executing synchronization project (Active Roles Synchronization for domain <domain name>)'s workflow (Initial Synchronization). [1777026] Error determining schema type (user (user)) revision!
[System.ArgumentOutOfRangeException] Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index
However when running the ARS sync project in simulation mode, it works fine with no issue. The same configuration and sync project have been executed in DEV & QA many times with no issue. The difference in PROD is that the ARS service account in PROD does not have the same permissions granted to DEV and QA. -
Cause
Permissions issue. -
Resolution
The message "Error determining schema type" normally indicates a permissions issue.
The required permissions are here:
https://docs.oneidentity.com/bundle/one-identity-manager_active-roles-integration_10.0/page/sources/ars/arssyncpermissions.html
Adding the service account to the Active Roles administrator group resolves the issue.