Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPGeneratePasswordJobDefinition, Microsoft.SharePoint, Version=16.0

Question

I'm running Edge as a Administrator (right click, run as admin). No change.

My account is a local/domain admin. My account is also a full Farm Admin.

My goal is to setup the automatic password changing feature for Managed Accounts in Sharepoint.

Error: Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPGeneratePasswordJobDefinition, Microsoft.SharePoint, Version=16.0

Answer 1

Hi @MReyes-9795 ,

The error message indicates that the user does not have the necessary permissions to create administration service job definitions for automatic password change in SharePoint.

To resolve this issue, the user needs to ensure that their account has the following memberships:

• securityadmin fixed server role on the SQL Server instance.
• db_owner fixed database role on all databases that are to be updated.
• Administrators group on the server on which they are running the PowerShell cmdlets.

In addition, the user can use the Add-SPShellAdmin cmdlet to grant permissions to use SharePoint Server cmdlets. If the user does not have permissions, they should contact their Setup administrator or SQL Server administrator to request permissions. For additional information about PowerShell permissions, see Add-SPShellAdmin.

Once the necessary permissions have been granted, the user can use PowerShell to repair the managed account on each server in the farm that has experienced a provisioning failure. For more information, see Configure automatic password change in SharePoint Server.

Hope this is helpful.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.