A particular user with the roles "Organisation member", "Project member", "Service Broker User" fails to successfully deploy a catalog item.
In Step-6 (Machine Provisioning) the user gets the error: "Create Failed: IllegalAccessError: forbidden"
When i add the role "Service broker viewer" to this user, he is able to deploy the catalog item successful.
But this makes no sense to me. With the role "Service broker viewer", the user gets to many menu items in his console.
This is the case with local (System) users and with users from AD.
Any ideas for a solution or suggestions for troubleshooting?
Message was edited by: sven.knockaert