SWPM: A required privilege is not held by the client

While performing an activity using the SAP software provisioning manager, below error message prompted,

System call failed. DETAILS: Error 1314 (0x00000522) (A required privilege is not held by the client.) 
in execution of system call 'CreateProcessAsUser' with parameter (&lt;token>, NULL, &lt;command line for 
executable E:\usr\sap\SID\J00\exe\sapjvm_8\bin\java.exe, NULL, NULL, TRUE, 0x420, NULL, 
C:/Program Files/sapinst_instdir/NW750/MSS/COPY/EXP/AS-JAVA/EXP, &amp;StartupInfo, &amp;ProcessInfo), 
line (613) in file (\bas/bas/749_REL/bc_749_REL/src/ins/SAPINST/impl/src/syslib/process/synxcchapp.cpp), 
stack trace: CThrThread.cpp: 83: CThrThread::threadFunction()
CSiServiceSet.cpp: 63: CSiServiceSet::executeService()
CSiStepExecute.cpp: 915: CSiStepExecute::execute()
EJSController.cpp: 187: EJSControllerImpl::executeScript()
JSExtension.hpp: 1136: CallFunctionBase::call()
CSiStepExecute.cpp: 766: CSiStepExecute::invokeDialog()
SLPGuiEngine.cpp: 67: SLPGuiEngine::showDialogCalledByJs()

Symptom

The solution and workaround shared as in SAP note 2515202 – A required privilege is not held by the client,

Case 1

During system copy export with Software Provisioning Manager (SWPM), the procedure stopped with an error. In the log file, the following content is recorded.

 An error occurred while processing option &lt;i>SAP Business Suite 2005 > SAP ERP 6.0 Support Release 3 
> Software Life-Cycle Options > System Copy > MS SQL Server > Source System Export > Central System 
> Based on AS ABAP > Database Instance Export( Last error reported by the step: System call failed. 
Error 1314 (0x00000522) (A required privilege is not held by the client.) in execution of system call 
'CreateProcessAsUser' with parameter (&lt;token>, NULL, &lt;command line for 
executable D:\usr\sap\&lt;SID>\DVEBMGS00\exe\R3load.exe, NULL, NULL, TRUE, 0x420, NULL,

Case 2

During SAP system installation following error appears:

TRACE 2018-01-17 13:33:53.744 (&lt;user>) (startInstallation) com.sap.sdt.ins.jsyslib.syslibconv.ChildApplication
Executing &lt;path>\sapcontrol.exe '-prot' 'PIPE' '-nr' '&lt;NR>' '-function' 'StartService' '&lt;SID>'.
ERROR 2018-01-17 13:33:53.781 (&lt;username>) (startInstallation) [synxcchapp.cpp:613] id=syslib.sysCallFailedWithStackTrace 
errno=FSL-00009 CSyChildApplicationImpl::doStart()
System call failed. DETAILS: Error 1314 (0x00000522) (A required privilege is not held by the client.) 
in execution of system call 'CreateProcessAsUser' with parameter
(&lt;token>, NULL, &lt;command line for executable &lt;path>\sapcontrol.exe, NULL, NULL, TRUE, 0x420, NULL, 
C:/Program Files/sapinst_instdir/&lt;service>, &amp;StartupInfo, &amp;ProcessInfo), 
line (613) in file (\bas/bas/749_REL/bc_749_REL/src/ins/SAPINST/impl/src/syslib/process/synxcchapp.cpp), 
stack trace: CThrThread.cpp: 85: CThrThread::threadFunction()

Solution

Case 1

It is not allowed to use the Windows built-in account Administrator to run the SWPM. Instead, please run SWPM with a user according to the system copy guide. Once the correct user with sufficient permissions is being used, the problem will not occur.

If the same issue continues to occur after you have verified the above, please follow these steps:

Check if User Account Control (UAC) is turned on for [USERDOMAIN] and SIDadm. If so, disable all the UAC options at the Control Panel.
- To double check that the option is disabled:
  - Check summary.html
  - Check regedit > HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\policies\system > EnableLUA > set to 0
Confirm [USERDOMAIN] belongs to Domain Admins group in AD or the system was prepared for it. For details, see KBA 2445952.
Set the following for [USERDOMAIN] and SIDadm by opening “Administrative Tools” -> “Local Security Policy” -> “Local Policies” -> “User Rights Assignment”, then add the admin group/user to the below rights:
- Act as part of the operating system
- Increase quotas / Adjust memory quotas for a process
- Replace a process-level token

Case 2

Open command prompt or PowerShell in elevated mode (run as administrator) and check if previous commands runs without any error:

[path]\sapcontrol.exe -prot PIPE -nr [NR] -function StartService [SID]
StartService
OK

Stop SWPM, stop all running sapinst processes
Open command prompt or PowerShell in elevated mode (run as administrator) and start sapinst from there
Continue with installation from the point it stopped before (Continue with old run)