Unable to create Groups through API

Question

Hi,
I have an approval workflow for creation of a new organization and it works fine.Once the last level of approval is completed, I should create a new org and three groups inside OIM. My adapter creates the new organization successfully. however, I am getting exception when I try to create the groups. Can someone please tell me what the issue is. I have assigned all the group permissions to the user group approving the request.Following is the code snippet and exception that I get:
HashMap<String,String> orgMap = new HashMap<String,String>();
               orgMap.put("Organizations.Organization Name", orgName);
               orgMap.put("Organizations.Type", "Organization");
               long orgKey = orgOper.createOrganization(orgMap);
               System.out.println("New Organization Created");
               HashMap<String,String> groupMap = new HashMap<String,String>();
               groupMap.put("Groups.Group Name", orgName+" Admin");
               long adminGroupKey = groupOper.createGroup(groupMap); - this is the line I get the following exception
Running CREATENEWORG
Target Class =security.iam.identity.adapters.tasks.CreatePartnerOrg
Initializing Class
New Organization Created
ERROR,08 Mar 2011 16:52:10,660,[XELLERATE.SERVER],Class/Method: tcDataObj/eventPreInsert Error :Insert permission is denied
ERROR,08 Mar 2011 16:52:10,661,[XELLERATE.APIS],Class/Method: tcGroupOperationsBean/createGroup encounter some problems: maoRejections:You do not have permission to insert this object.
Thor.API.Exceptions.tcAPIException: You do not have permission to insert this object.
Thanks,
Supreetha

Answer 1

You need to give your user insert/create permissions for groups. If it is creating it after the approval is completed, then you need to assign the permissions to the group of users who would perform the last approval because their session is passed onto the rest of the tasks. You could use private key authentication though to switch to xelsysadm and use that user to create the group.
-Kevin