[Troubleshooting] CheckSharepointFarmAdministratorWithOpenPermission
Problem Statement
When attempting to install the FIM Portal, it may rol back on you with no visible error message. In that case, you will need to obtain a Windows Installer Log to understand what is happening. In this issue. we obtained a Windows Installer Verbose Log and found the following information.
Windows Installer Log
Calling custom action Microsoft.IdentityManagement.SharePointCustomActions!Microsoft.IdentityManagement.ManagedCustomActions.SharepointCustomActions.CheckSPFarmAdminOpenPermission
Property name = 'SHAREPOINT_URL', value = 'https://localhost'.
Property name = 'UILevel', value = '5'.
Property name = 'UILevel', value = '5'.
Property name = 'UILevel', value = '5'.
Property name = 'UILevel', value = '5'.
CustomAction CheckSharepointFarmAdministratorWithOpenPermission returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 13:17:48: CheckSharepointFarmAdministratorWithOpenPermission. Return value 3.
Resolution
The account executing the installation needs to be part of the
- SharePoint Farm Administrators Group.
- SharePoint Site Administrators
These permissions are controlled via the SharePoint Central Administration.