Got this error when I click on my BDC service in Central Admin: The full exception text is: Access is denied

Question

These are the steps I did under the local administrator:

I go to central admin -> application management -> manage service applications

I click on New-> Business Data Connectivity Service

I enter/select the required fields like name, application pool, application pool identity and click on OK. After a while I see some text that my BDC is created succesfully.

No I see the list with all service applications. When I click on my created BDC service application I got this error:

Error An error occurred. Administrators, see the server log for more information.

Troubleshoot issues with Microsoft SharePoint Foundation.

Correlation ID: 27275209-7fc0-4912-9970-feba5356e9cc

Date and Time: 5/25/2013 9:19:41 PM

In the event viewer I see this error:

The BDC Service application BDC is not accessible. The full exception text is: Access is denied.

Why I get this error? The user which I am logged in is the local administrator and is the site collection owner. BUT I have selected another user account for the application pool for this BDC.

Answer 1

Local Administrator has nothing to do with SharePoint as it has no permissions assigned by default. Furthermore, you should only use Domain accounts when configuring or manipulating SharePoint in any way. Exception could apply, but really not recomanded at all.

You would need to use your Farm Administrator and under Service Applications locate the BCS Service application and change security of the respective BDC Model (you might have more if you deployed multiple, choose appropriate one) as deployed in SharePoint and allow respective users (again - domain users) to Execute, Read, etc.

Tried something similar to these steps http://blogs.msdn.com/b/ericwhite/archive/2010/06/11/access-denied-by-business-data-connectivity.aspx ?

Answer 2

Your error could be because the authentication methods that were allowed on the SecureTokenServiceApplication IIS web application were not correct so Please check this great article, I think you could find here your solution:

http://johnnyharbieh.wordpress.com/2012/09/19/event-id-8085-business-data-connectivity-service-application-is-not-accessible/

Answer 3

Check that SecurityTokenSErviceApplication is started in IIS settings(App Pools in inetmgr.exe), and reenter credentials in it's Advansed Settings-> Identity. If doesn't help - try to reprovision Security Token Service application, example using this PS code:

Get-SPServiceApplication
$sts = Get-SPServiceApplication | ?{$_ -match "Security"}
$sts
$sts.Status
$sts.Provision()