ProTip for SIEM: : Access Denied (ER70) - (when adding or modifying a Data Source)
After re-imaging (via ISO) or during a new installation of a SIEM "combo box" (ESM/REC/ELM) you might not be able to create or modify Receiver Data Sources. Specifically, when you attempt to add a new Data Source (or modify an existing one) you see the following error message in the ESM user interface:
Access Denied (ER70)
The message suggests that the user might not have the required permissions; however, this issue is usually a permissions issue related to the device itself and not the user (logging in as a different user has no effect).