The developer has Environment Maker Role assigned in the DEV and TEST environments. The Deployment Pipeline was shared out with them and they have Pipeline User role in the Orchestrator Environment. When they try and deploy a new solution that has environment variables to a new environment they get the following error.
Failure details
Principal with id f0772446-20a0-ee11-be37-000d3a5a8baa does not have WriteAccess right(s) for record with id 3ce10b7e-0110-4230-bdcc-aaf77125c07c of entity environmentvariabledefinition. Details: {"CallerPrincipal":{"PrincipalId":"f0772446-20a0-ee11-be37-000d3a5a8baa","Type":8,"IsUserPrincipal":true},"OwnerPrincipal":{"PrincipalId":"cf0fca4d-d19b-ee11-be37-6045bd081aaa","Type":8,"IsUserPrincipal":true},"ObjectId":"3ce10b7e-0110-4230-bdcc-aaf77125c07c","ObjectTypeCode":380,"EntityName":"environmentvariabledefinition","ObjectBusinessUnitId":"9a07ca4d-d19b-ee11-be37-6045bd081aaa","RightsToCheck":"WriteAccess","RoleAccessRights":"None","PoaAccessRights":"None","HsmAccessRights":"None","GrantedAccessRights":"None","Messages":["BasicMinimumPrivilegeDepthRequired = None","EntityUserGroupRights = None","LocalMinimumPrivilegeDepthRequiredRights = WriteAccess","SecLib::AccessCheckEx2 failed. Owner Data: User principal cf0fca4d-d19b-ee11-be37-6045bd081aaa is not loaded in UserDataCache yet; Principal Data: roleCount=1, privilegeCount=891, accessMode='0 Read-Write', AADObjectId='42c06e7a-f452-42e7-8a00-1c66cdb8ad54', MetadataCachePrivilegesCount=4705, businessUnitId=9a07ca4d-d19b-ee11-be37-6045bd081aaa"],"EntityOwnershipTypeMask":1,"CallerInfo":{"IsSystemUser":false,"IsSupportUser":false,"IsAdministrator":false,"IsCustomizer":false,"IsDisabled":false,"IsIntegrationUser":false,"Teams":null,"Roles":null},"ReadOnlyState":"UserAndOrgFullAccess","IsHsmEnabled":false,"HsmInfo":null,"AccessOrigin":null}
See less