Hello everyone,
We have a site running Opera 3 SQL SE in testing currently. Their IT company have created a service account for the Pegasus Opera Service to run under which we have configured and Opera works fine. However, we are unable to apply the Domain User to the Opera user profile in Opera because the dropdown box is greyed out. I logged this with Pegasus and they advised the service account does not have access to Active Directory records and this is why the dropdown is greyed out. So I went back to the IT company and they have advised the following:-
"The sa-opera account has “Read All Properties” for all Descendant User Objects in Active Directory. The delegation was set at the root of the domain. This is the same permissions as our other backend systems that retrieve user details from AD. I have double checked the effective permissions with the sa-opera account against AD and also specifically against the “XRL” security group, and confirmed it has full read permissions to every AD attribute."
We've never encountered this issue before because on other sites the Opera Service runs under Local System and the dropdown box works as expected.
It behaves the same if the Pegasus Opera Service is configured to run under the Local System account but if we run it under our own domain admin account then the dropdown box in Opera works as expected. IT do not want us to run the Opera service under our own domain admin account.
Does anyone know what could be the cause of this issue before I log it with support again (my original case was automatically closed).
Thanks,
Alex
