Showing results for 
Show  only  | Search instead for 
Did you mean: 

ProTip for SIEM: : Access Denied (ER70) - (when adding or modifying a Data Source)

After re-imaging (via ISO) or during a new installation of a SIEM "combo box" (ESM/REC/ELM) you might not be able to create or modify Receiver Data Sources. Specifically, when you attempt to add a new Data Source (or modify an existing one) you see the following error message in the ESM user interface:

Access Denied (ER70)

The message suggests that the user might not have the required permissions; however, this issue is usually a permissions issue related to the device itself and not the user (logging in as a different user has no effect).

For more information and a solution to this issue, see KB87295 (

Version history
Revision #:
1 of 1
Last update:
‎08-02-2016 07:47 AM
Updated by:

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community