FIM RC1: Access to the requested resource(s) is denied

A common attribute used in ILM projects is the “Employee Status” attribute. In RC1, this value does not exist for the user resource type within the portal. Additionally, there might be more attributes you need to create and associate with any resource type; therefore, after going through the procedures documented in the “Introduction to Schema Management” guide, you’ll probably experience the following error when exporting data from the FIM MA:

"failed-web-motification-error"

Type: Microsoft.ResourceManagement.WebServices.Client.PermissionDeniedException

Message: Access to the requested resource(s) is denied

Stack Trace:    at Microsoft.ResourceManagement.WebServices.Client.UninitializedResource.PerformUpdate()
   at Microsoft.ResourceManagement.WebServices.Client.UninitializedResource.Update()
   at MIIS.ManagementAgent.RavenMA.ExportObjectModification(DataSourceObject dsObject, SchemaManager schemaManager)
   at MIIS.ManagementAgent.RavenMA.Export(DataSourceObject dsObject)

As Joe mentions on the forums, in RC1 the default MPRs list explicit attribute values within the list of resource attributes versus just saying “All Attributes.” Any custom attribute needs to be added in order for the synchronization account to update them during an export procedure. To do so, just add the attribute to the “Synchronization: Synchronization account controls users it synchronizes” MRP. Not sure if this is relevant, but I had to cycle my FIM Service for it to apply immediately.