[Troubleshooting] CheckSharepointFarmAdministratorWithOpenPermission

Problem Statement

When attempting to install the FIM Portal, it may rol back on you with no visible error message.  In that case, you will need to obtain a Windows Installer Log to understand what is happening.  In this issue. we obtained a Windows Installer Verbose Log and found the following information.

Windows Installer Log

Calling custom action Microsoft.IdentityManagement.SharePointCustomActions!Microsoft.IdentityManagement.ManagedCustomActions.SharepointCustomActions.CheckSPFarmAdminOpenPermission

Property name = 'SHAREPOINT_URL', value = 'http://localhost'.

Property name = 'UILevel', value = '5'.

Property name = 'UILevel', value = '5'.

Property name = 'UILevel', value = '5'.

Property name = 'UILevel', value = '5'.

CustomAction CheckSharepointFarmAdministratorWithOpenPermission returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

Action ended 13:17:48: CheckSharepointFarmAdministratorWithOpenPermission. Return value 3.


The account executing the installation needs to be part of the

  • SharePoint Farm Administrators Group.
  • SharePoint Site Administrators

These permissions are controlled via the SharePoint Central Administration.

Additional Information