Debug Read only access

sureshbommareddy98 · February 16, 2026, 8:24am

Hi Team,

Recently, we upgraded SailPoint IdentityIQ from version 8.3 to 8.4. As part of this upgrade, SailPoint introduced new Debug Page access features. We are currently trying to grant read-only access to the Debug Page for a user. However, when the user attempts to access the Debug Page, the following error occurs.

Steps:

Logging with admin users.
Select the user then assign view debug page read only access from user rights
Try to access debug page with that user.

Access denied. You don’t have the capability required to view the requested page.

msingh900 · February 16, 2026, 8:47am

Hi @sureshbommareddy98

This is OOTB feature of SailPoint that is introduced in 8.4. Have you tried checking the user profile whether that capability is saved or not to the user profile.

Thanks

Manish Singh

neel193 · February 16, 2026, 8:51am

@sureshbommareddy98 You need to assign “DebugPagesReadOnlyAccess” cabality to the user to allow them to access Debug in read only mode.

sureshbommareddy98 · February 16, 2026, 8:57am

I can see that capability assigned to user in debug as well

neel193 · February 16, 2026, 9:54am

@sureshbommareddy98 Have you tried log out and re-login after assigning the capability?

sureshbommareddy98 · February 16, 2026, 10:05am

Yes, I tried in incognito window

sagr0812 · February 16, 2026, 10:55am

Since “View Debug Pages Read Only” is already assigned and you’ve re-logged in, please also try assigning “View Admin Console” temporarily and test again.
In 8.4, Debug access may still require Admin Console visibility. Also ensure the capability is saved properly and no scope restrictions are applied thanks.

sureshbommareddy98 · February 16, 2026, 11:15am

I have assigned view admin console as well however still seeing error

pattabhi · February 16, 2026, 12:20pm

Dear @sureshbommareddy98

Greetings!

Please check below topic: FullAccessMemoryPage capability added for members of a workgroup not working

Tested in my sandbox: IIQ8.5
Without any capability:

after selecting: View Debug Pages Read Only, save it.

I can see the expected result:

pattabhi · February 16, 2026, 2:17pm

Please check the below config present.

Look at identity cube: whether the capability is assigned.

pattabhi · February 16, 2026, 2:36pm

Dear @sureshbommareddy98

Please do create new capability with below:

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Capability PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Capability created="" displayName="capability_debug_pages_read_only_access" id="" modified="" name="DebugPagesReadOnlyAccess-Test">
  <Description>capability_desc_debug_pages_read_only_access</Description>
  <RightRefs>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessAboutPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessDebugPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessMemoryPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessCachesPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessCountPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessBeansPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessThreadsPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessMetersPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessMetersGridPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessLoggingPage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessDatabasePage"/>
    <Reference class="sailpoint.object.SPRight" id="" name="ViewAccessConnectionsPage"/>
  </RightRefs>
</Capability>

assign this to user and validate it, I hope this will fix your issue.

Note:
Mark the Solution: Help the community by marking the correct comment as the Solution.

Show appreciation: Feel free to react with an emoji (, , etc.) to let others know the post was helpful.

Need more help? Message me directly if your issue requires a deeper dive.

robert-hails · February 16, 2026, 2:57pm

Please check your WebResource configuration object and ensure the updates made in 8.4 are present within your environment

sureshbommareddy98 · February 16, 2026, 3:35pm

Thanks for the update..I didn’t see the viewdebug page access spright in the websource. Can you please provide the sample key

robert-hails · February 16, 2026, 3:45pm

It wouldn’t just be one key, there are several keys given how many SPRights the DebugPagesReadOnlyAccess capability gives. Here’s a snippet

<WebResource rights="ViewAccessBeansPage,FullAccessBeansPage" url="debug/beans.*"/>
<WebResource rights="ViewAccessThreadsPage,FullAccessThreadsPage" url="debug/threads.*"/>
<WebResource rights="ViewAccessAboutPage,FullAccessAboutPage" url="debug/about.*"/>
<WebResource rights="ViewAccessMemoryPage,FullAccessMemoryPage" url="debug/memory.*"/>
<WebResource rights="ViewAccessMetersPage,FullAccessMetersPage" url="debug/meters.*"/>
<WebResource rights="ViewAccessLoggingPage,FullAccessLoggingPage" url="debug/logging.*"/>
<WebResource rights="ViewAccessDatabasePage,FullAccessDatabasePage" url="debug/database.*"/>
<WebResource rights="ViewAccessDebugPage,FullAccessDebugPage" url="debug/debug.*"/>
<WebResource rights="ViewAccessCachesPage,FullAccessDebugPage" url="debug/caches.*"/>
<WebResource rights="ViewAccessActiveMQPage,FullAccessDebugPage" url="debug/activemq.*"/>
<WebResource rights="ViewAccessConnectionsPage,FullAccessDebugPage" url="debug/connections.*" />

It’s probably easier to compare your WebResource object in your environment to the WebResource object found in your 8.4 war. Can be found WEB-INF/config/webResource.xml