Issue in Removing inconsistent privileges from user in IDM

141 Views

Hello Experts,

SAP IDM 7.1 , SP7.

Database: Oracle (3.0.04.34)

I am struggling to remove inconsistent privileges from a particular user in IDM.

There are two different privilege inconsistencies:

Inconsistency 1:

MXREF_MX_PRIVILEGE attribute for a user has one privilege which is in pending status and now need to be cleared from IDM UI.

This privilege for this user does not exist in MXI_VALUES, MXIV_SENTRIES, MXIV_ALL_ENTRIES, MXI_PRIV_ROOT .

But in IDM UI, I see that this User is having this privilege in pending status and so does not get removed from UI.

Inconsistency 2:

MX_AUTOPRIVILEGE attribute for a user has 11 privileges assigned and is dirty data and need to be cleaned up.

These privileges for this user does not exist in MXI_VALUES, MXIV_SENTRIES, MXIV_ALL_ENTRIES, MXI_PRIV_ROOT .

But in IDM UI, I see that this User is having these privileges assigned and so does not get removed from UI.

Kindly assist me in resolve this issue.

I had removed such inconsistencies for other users in the past and it worked fine by cleaning up it from MXI_VALUES and MXI_PRIV_ROOT but for this user it does not work.

Due to this I am not able to assign privileges via new roles assignments as it does not create CUP request for the user.

Regards,

Pradeep