user/group management

Make sure that the new user has all the permissions you want them to have and you save the settings. For more information, see:

http://docs.adobe.com/docs/en/aem/6-0/administer/security/security.html

http://docs.adobe.com/docs/en/aem/6-0/administer/security/security.html#Permissions

The issue could be that the permissions were not saved properly in the system. 

I can confirm all the  permissions are saved properly. I looged into system in different browser and checked the permissions of custom user. Infact i have given permission to everything at root level. So user has every access to all folders. I tried this on top of AEM 6.0 SP2 version. But still i am getting the access denied error.

I have tried to see if i could get the same error on AEM 6. I made a user named admin2:

[img]foo2.png[/img]

I could do everything that i set my permissions for and able to log in. As you can see in this illustration.

Can you try just creating a single user with similiar permissions and see if you get that error still. 

Hi,

I have created the similar user. Even i can login to the system. The issue i am facing is below. When i try to create the group or add user using the new user created getting error. Can you try from your end by creating the new group or adding user to existing group with user admin2?

1. Creating group/user

2. Adding existing user to another group

"org.apache.sling.engine.impl.SlingRequestProcessorImpl service: Uncaught SlingException
javax.jcr.AccessDeniedException: OakAccess0000: Access denied
    at org.apache.jackrabbit.oak.api.CommitFailedException.asRepositoryException(CommitFailedException.java:231)
    at org.apache.jackrabbit.oak.api.CommitFailedException.asRepositoryException(CommitFailedException.java:212)
    at org.apache.jackrabbit.oak.jcr.delegate.SessionDelegate.newRepositoryException(SessionDelegate.java:665)"

Caused by: org.apache.jackrabbit.oak.api.CommitFailedException: OakAccess0000: Access denied
    at org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.checkPermissions(PermissionValidator.java:235)
    at org.apache.jackrabbit.oak.security.authorization.permission.PermissionValidator.propertyAdded(PermissionValidator.java:111)
    at org.apache.jackrabbit.oak.spi.commit.VisibleValidator.propertyAdded(VisibleValidator.java:83)
    at org.apache.jackrabbit.oak.spi.commit.VisibleValidator.propertyAdded(VisibleValidator.java:83)

to explain better, login to system with admin2 user navigate to <domain:port>/useradmin . Please try creating the new group/user or add some user to existing group.