Skip to main content

Common SharePoint On-Prem Scanning Permission Errors

Overview​

Getting the permissions right in SharePoint on-premise can be tricky, so here are the expected permission-related errors and what you should check when you see them.

Instructions​

Based on the error, check to make sure that the user has the permission(s) associated with it.

SPAA against SharePoint 2013/2016​

Missing PermissionExpected Error
Local Group Membership: Backup OperatorsUnable to determine administrative site for (host URL) error accessing remote registry. Requested registry access is not allowed
Local Group Membership: WSS_WPG GroupUnable to negotiate connection to SharePoint database server (host URL): Error: Access is denied
Full Read Web Application PolicyUnable to negotiate connection to farm: Unable to negotiate connection to SharePoint server sbpmlab-sp10
Site Collection Admin on Central Administration Site CollectionUnable to retrieve site collection "URL" Error: Access denied. You do not have permission to perform this action or access this resource.
No DB permissions at allUnable to negotiate connection to SharePoint database server (host URL): Error Connection Timeout Expired. The timeout period elapsed while attempting to consume the pre-login handshake acknowledgement. This could be because the handshake failed or the server was unable to respond back in time. The duration spent while attempting to connect to this server was - [Pre-Login] initialization=4943; handshake=1768;
SP_DataAccess Role membership on SharePoint Content DatabasesUnable to negotiate connection to SharePoint database server (host URL): Error Connection Timeout Expired. The timeout period elapsed while attempting to consume the pre-login handshake acknowledgement. This could be because the handshake failed or the server was unable to respond back in time. The duration spent while attempting to connect to this server was - [Pre-Login] initialization=4943; handshake=1768;
SP_DataAccess Role membership on SharePoint Config DatabaseError enumerating ISharePointSiteCollection children of ISharePointWebApplication. The EXECUTE permission was denied on the object 'proc_getSiteNames', database 'SharePoint_Config'
Public membership to SharePoint_Config, Owner on the content DBUnable to negotiate connection to SharePoint database server sbnjqasp01: Error: The EXECUTE permission was denied on the object 'proc_getObject', database 'SharePoint_Config', schema 'dbo'

SPAA against SharePoint 2010​

Missing PermissionExpected Error
Local Group Membership: Backup OperatorsUnable to determine administrative site for (host URL) error accessing remote registry. Requested registry access is not allowed
Local Group Membership: WSS_WPG GroupUnable to negotiate connection to SharePoint database server (host URL): Error: Access is denied
Full Read Web Application PolicyUnable to negotiate connection to farm: Unable to negotiate connection to SharePoint server sbpmlab-sp10
Site Collection Admin on Central Administration Site CollectionUnable to retrieve site collection "URL" Error: Access denied. You do not have permission to perform this action or access this resource.
No DB permissions at allUnable to negotiate connection to SharePoint database server (host URL): Error Connection Timeout Expired. The timeout period elapsed while attempting to consume the pre-login handshake acknowledgement. This could be because the handshake failed or the server was unable to respond back in time. The duration spent while attempting to connect to this server was - [Pre-Login] initialization=4943; handshake=1768;
SP_DataAccess Role membership on SharePoint Content DatabasesUnable to negotiate connection to SharePoint database server (host URL): Error Connection Timeout Expired. The timeout period elapsed while attempting to consume the pre-login handshake acknowledgement. This could be because the handshake failed or the server was unable to respond back in time. The duration spent while attempting to connect to this server was - [Pre-Login] initialization=4943; handshake=1768;
SP_DataAccess Role membership on SharePoint Config DatabaseError enumerating ISharePointSiteCollection children of ISharePointWebApplication. The EXECUTE permission was denied on the object 'proc_getSiteNames', database 'SharePoint_Config'
Public membership to SharePoint_Config, Owner on the content DBUnable to negotiate connection to SharePoint database server sbnjqasp01: Error: The EXECUTE permission was denied on the object 'proc_getObject', database 'SharePoint_Config', schema 'dbo'