marklogic / cloud-enablement-azure Goto Github PK

Environment - DHS/Azure. Attached screen shot shows all the roles 'testuser' has.

Query Console code for creating privilege fails.
Code:

'use strict';

// execute this against the security database

declareUpdate();
const sec = require('/MarkLogic/security.xqy');

sec.createPrivilege("mypriv",
"http://marklogic.com/xdmp/privileges/mypriv",
"execute",
"Developer")

// Creates an execute privilege, named "mypriv," and assigns it to the "Developer" role.

Failure message:

[javascript] SEC-PRIV: xdmp:security-assert("http://marklogic.com/xdmp/privileges/create-privilege", "execute") -- Need privilege: http://marklogic.com/xdmp/privileges/create-privilege

Code executed via SoapUI.
Post: https://xqajd70xq.z.marklogicsvc.com:8003/manage/v2/privileges
{
"privilege-name": "test-priv",
"action": "http://marklogic.com/xdmp/privileges/rest-reader",
"kind": "execute"
}

Failure message:
{"errorResponse": {
"statusCode": "403",
"status": "Forbidden",
"messageCode": "",
"message": "You do not have credentials to access /manage/v2/privileges ."
}}