Some databases require escalated privileges for Connections taking part in XA recovery.
There should be a way to provide the correct authentication for this kind of Connections.