Login to the OpenSSO Enterprise Administration Console.
Click Access Control and then the name of the realm where you created the agent group.
Click Privileges.
Click the agent profile group. For example: agentusergroup
On the Privileges page, check:
Read and write access to all realm and policy properties
Click Save.