Unable to replicate secrets for user %1 on read-only DC %2 from full DC %3. The cause of this error is due to one of the ...

Unable to replicate secrets for user %1 on read-only DC %2 from full DC %3.
The cause of this error is due to one of the following:
* The caller does not have the "Secret Synchronization" control access right on the read-only DC above.
* The user above is a security sensitive user that cannot have secrets replicated to any read-only DC.
* The user above is not a member of the RevealOnDemand group associated with the read-only DC above.
* The user above is a member of the NeverReveal group associated with the read-only DC above.