Aderant Permissions FAQ

Use to resolve permissions errors for entry release.

S
Written by Shaun Bernhardt
Updated over a week ago

Testing Aderant

  • Verify that Timekeeper ID for ping01 user is the same Timekeeper (EMPLOYEE_NUMBER) in the SQL database

  • Open a web browser on the client VM

  • In the Ping Aderant Endpoints guide linked above we have the endpoints that TBP will communicate with

  • Browse to each of these endpoints → click on Read Single

  • There should be a search bar labeled uno → enter 1 into this search bar and click on search

  • You should receive an XML response

    • If you get a permissions error the firm will need to contact Aderant support to have the necessary endpoints permission’s adjusted

Note: Please test this with SOAP UI, if you have to use the authentication endpoint or log in before performing any operations this means that Auth Service is in use. Please had the firm disable this method for the TBP svc account.


SOAP UI testing

Authentication Service should not be used. If for some reason you need to log in prior to connecting to one of these endpoints you will run into issues. Auth service endpoint http://ADERANTROOT/Tools/ToolsWS/AuthenticationService.asmx

  • In SOAP UI Navigate to → New SOAP Project

    • Create a SOAP project per endpoint

    • Click on New SOAP Project

    • Project name can be anything

    • Refer to Link below for Initial WSDL

    • http://ADERANTROOT/Time/TimeWS/TimeEntryService.asmx?WSDL to test TimeEntry service (Time entry and releasing time)

Note: Refer to Required Aderant Endpoints (Click)


Verify Access ASAP - this can become a blocker.

  1. Launch Chrome/browser via shift rt-click Run As Different User -> try both the Windows service account (live access) -> eg. svc_TBPprod

  2. Windows service account (test access) -> eg. svc_TBPtest

  3. Then, go to http://ADERANTROOT/Time/TimeWS/TimeEntryService.asmx

  4. > ReadSingle > invoke = 1

  5. IF YOU GET A PERMISSIONS ERROR, THEN AN AUTH SERVICE IS BEING USED. Please “Grant All” for these Win Service Accounts (live & test access) for these endpoints.

TimeWS

ExpensesWS <-- Not needed

FileOpeningWS

ToolsWS (Only required for certain Aderant setups - normally bypassed)

    • AuthenticationService.Login

      • Generates a cookie for the service account to be used to authenticate subsequent requests

    • AuthenticationService.LoggedIn

      • Checks whether the user is logged in or if the cookie has expired.


Aderant Troubleshooting

Principal permissions error

  • This is generally caused by our service account not having the proper access to API endpoint operations

  • Solution 1: Customer have not given our user access level 1 - this will need to be adjusted within their security manager

  • Solution 2: Customer have not set our users endpoint access correcting in security manager. Please see:

Solution 3: Customer has not set up Login manager

Did this answer your question?