Event ID: 4216 Access denied. User is not in a role that can manage Enterprise Vault PST tasks'. is generated after changing the account for the PST Locator task

Problem

Enterprise Vault 12.0 introduces Roles-bases Administration (RBA) which provides a flexible framework for integrating role-based access control. It enables administrators who use those applications to provide access through assigned user roles that relate to job functions. Once the logon account is changed from the vault service account the new account will need to be added to the correct PST role.

The following warning and errors will be generated in the Enterprise Vault event viewer log after changing the logon account for the PST Locator Task:

Error Message

Event ID 4216:
Access denied. User is not in a role that allows '{ DIR } Can manage Enterprise Vault PST tasks'
V-437-4216

Event ID 8391:
The EnterpriseVaultDirectoryService object reported an error. General access denied error.
V-437-8391

Event ID 410034:
The task 'PST Locator Task' has stopped due to an error. Task update failed: Failed to contact the directory service, command: UpdateRecord
V-437-410034

Solution

Add the account to the PST Administrator group using Roles-based administration.  

For more information on predefined roles please refer to the Administrator's Guide