How to solve this error in Orchestrator while trying to create a Standard Robot in a Classic Folder? "Action forbidden: You selected at least one role that grants more than your set of permissions. Please remove the following role(s): YOUR_ROLE to continue. (#1437)"
Issue Description
"Action forbidden: You selected at least one role that grants more than your set of permissions. Please remove the following role(s): YOUR_ROLE to continue. (#1437)"
Example from UI:
Example from the Back-End:
{
"message": "Action forbidden: You selected at least one role that grants more than your set of permissions. Please remove the following role(s): Robot to continue.",
"errorCode": 1437,
"traceId": "00-58291144f6704c228454a055b6802d42-e47930354250d927-01",
"resourceIds": null
}
Resolution
Approach #1
Roles.Edit / Roles.Create permission is the one exception that allows the user to break the above rule, as they are responsible for editing roles.
To skip this rule, add Roles.Edit and Roles. Create the custom role (at the tenant level) that the user inherits from his group. In this way, the user will be able to add any Robot and grant any role, not only the Robot one.
To create a Standard Robot, the assigned role to the impacted user should have these permissions at the Tenant level:
Approach #2
Another option is to add the Robot role to the user's group. In case of using multiple folders, this role will need to be added to each folder.
In this way, the impacted user is able to add other users/ Robots with the Robot role to the desired folder. Still, if he wants to add users/ Robots with other roles, those will need to be added too at the group level. Reference: Assigning Roles.
Note: Some UiPath features are already deprecated and it is required to perform the needed changes in order to continue to receive support from UiPath. Reference: Deprecation Timeline.