Documentation

Content copy fails due to an authorization error in AEMaaCS

Last update: Mon Sep 22 2025 00:00:00 GMT+0000 (Coordinated Universal Time)

In Adobe Experience Manager as a Cloud Service (AEMaaCS), the Content Copy Activity fails when copying content from production to staging environments. The operation throws an AUTH-100: User is not authorized to perform content backflow  error, even though administrative roles are assigned. This issue occurs due to permission misconfigurations and duplicate user accounts. To resolve the issue, validate roles, remove duplicates, and reassign permissions.

Description description

Environment

  • Product: Adobe Experience Manager as a Cloud Service (AEMaaCS)– Assets
  • Instance: Production and Staging

Issue/Symptoms

  • The Content Copy Activity fails with the error: AUTH-100: User is not authorized to perform content backflow.
  • The administrative and Deployment Manager roles are correctly assigned in both the source and target environments.
  • Duplicate user accounts with identical names or email addresses cause permission mapping conflicts.

Resolution resolution

Follow these steps to fix the authorization error during Content Copy Activity:

  1. Validate Roles and Permissions

    • Make sure the Adobe ID is assigned the Deployment Manager role in Cloud Manager for the program.
    • Confirm the account is added to the AEM-Administrators group in both source (PROD) and target (STAGE) environments.

  2. Check Product Profile Name

    1. In Admin Console, go to  Adobe Experience Manager as a Cloud Service product.
    2. Open the AEM-Administrators product profile for your author instance.
    3. Ensure the profile name hasn’t been changed. Renaming it revokes admin rights for all assigned users.

  3. Inspect for Identity Conflicts

    1. In Admin Console and in AEM’s  Security > User Panel, check for duplicate entries with the same name or email.
    2. Remove any redundant accounts to avoid mapping issues.

  4. Reassign Group Membership

    • Temporarily remove the affected user from the AEM-Administrators group in Admin Console.
    • Re-add the user to the group.
    • Verify group membership under Security > Users.

  5. Recreate User (Final Remediation)

    • Create a new user account.
    • Assign it to the AEM-Administrators group and the Deployment Manager role.
    • Test the Content Copy Activity.

Required Permissions for Content Copy

Action
Required Roles
Start/Cancel Copy
AEM Administrator + Deployment Manager
Create/Modify Content Sets
Deployment Manager

Best Practices

  • Keep user accounts unique across Admin Console and AEM.
  • Revalidate roles or recreate accounts if permissions don’t propagate.
  • Never rename the AEM-Administrators product profile.
  • After any admin changes, verify permissions in both Admin Console and AEM.
  • If all else fails, recreate the user and reassign roles.

For further assistance, contact Adobe support.

recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f