ProTip for SIEM: : Access Denied (ER70) - (when adding or modifying a Data Source)

Version 1

    After re-imaging (via ISO) or during a new installation of a SIEM "combo box" (ESM/REC/ELM) you might not be able to create or modify Receiver Data Sources. Specifically, when you attempt to add a new Data Source (or modify an existing one) you see the following error message in the ESM user interface:

    Access Denied (ER70)

    The message suggests that the user might not have the required permissions; however, this issue is usually a permissions issue related to the device itself and not the user (logging in as a different user has no effect).

    For more information and a solution to this issue, see KB87295 (