Not Authorized to Invoke Service Operation

While testing a web service (via a CI), the following message came back (this is using soapUI):

<IBResponse type="error">
  <DefaultTitle>Integration Broker Response</DefaultTitle>
  <StatusCode>20</StatusCode>
  <MessageID>536</MessageID>
  <DefaultMessage>User USER not authorized to invoke Service Operation EXAMPLE. (158,536)</DefaultMessage>
  <MessageParameters>
    <Parameter>USER</Parameter>
    <Parameter>EXAMPLE</Parameter>
  </MessageParameters>
</IBResponse>

This relates to service operation security. Specifically, the user in question does not have security to the relevant service operation.

Here's how to check/update the service operation security:

• Open the service operation mentioned in the message.
• On the service operation page, there will be a hyperlink labelled Service Operation Security. Click on that to bring up the service operation security settings (opens in a new tab/window).
• Add a permission list that you know the user mentioned in your message has in their security settings.
• Save and re-test.