3.5 Unable to Save Responses in SSPR for Identity Manager Standard Edition Deployment on AKS

Issue: While trying to save responses in Self Service Password Reset (SSPR), if a user does not have correct permissions, the following error appears in the SSPR log:

ERROR, operations.CrService, error saving responses via LDAP, error: 5045 ERROR_WRITING_RESPONSES (permission error writing user responses to ldap attribute 'pwmResponseSet', user does not appear to have correct permissions to save responses: javax.naming.NoPermissionException: [LDAP: error code 50 - NDS error: no access (-672)])

This issue is specific to deployment of Identity Manager containers on Azure Kubernetes service. (Bug 572032)

Workaround: To assign the required permission, add the following ldif for the respective container in the values.yaml file in the DATA_CONTAINERS section:

dn:  o=data
changetype: modify
add: ACL
ACL: 7#subtree#[This]#pwmResponseSet
-