Application Networking Manager 4.1 cannot push config

Question

Hi Guys,
I have just set up this Cisco app to manage an ACE blade and I'm having issues deploying changes I make via the GUI to the device.
I have set up the sync'd the config from the blade and can config the ACE using CLI and my TACACS account without problem. I have set up a new org "test" and set up my account with create privs across the board basically making this account a superuser account. So I log into the application using user@test which is authenticated by TACACS and I can see my ACE blade. When I try to deploy anything to the ACE I get "Failed to deploy config to device: Infringing CLI command: with reason: Admin role required for configuration"
Have checked all my settings and I have given this user create roles for all options but I still get this error
Can anyone give any pointers to where this is failing on the authentication - is it the app or is it TACACS?
thanks
JR

Answer 1

To get this working I ended up doing:
Deleting the chassis from the ANM from the Config->Guided Setup->Import Devices screen and then adding the chassis back in with the new username and consequent password.
As I needed to keep remote authentication (via) ACS for all other users I had to give the ANM a user that could be auth'd remotely.  An AD service account was created for this authentication purpose only.  In the ACS, I gave that user sufficient privileges and had it authing to AD.
Apart from not being able to auth if the ACS server or AD is down, this seems to be working okay.
PS..  In retrospect I perhaps should have created a local user first before I did the AD thing because now when I try to add that user in as a local user (in case of the unlikely event of the aforementioned problem of losing AD or ACS) the ACE module says that the user is already a remote user and I can't add it as a local user..
Thanks all.
Brad