Skip to Content
0
Aug 31, 2023 at 08:58 AM

Can't able to remove 1026 privilege from user IDM profile by using any operations in MMC.

140 Views

Hi All,

There are some privilege assignments which are in 1026, 1028 status in user IDM profile.
Some privileges were orphaned some were not.

These status assignments exist in active and disabled user profile. Because of these assignments MX_INACTIVE is not getting set.

I tried using operation {e}, {E}, {d}, {D} the job run successfully but assignment is not getting removed from user IDM profile.


Select mcThisMSKEYVALUE as UserID,mcOtherMSKEYVALUE as Role_Priv from idmv_link_ext with(nolock) where mcThisMSKEYVALUE='user_ID' and mcOtherOcName ='MX_PRIVILEGE' and mcExecState in (1026,1028)

image.png

image.png

For Orphan privileges I have used 2499697 - Introducing new DB stored procedure for orphan assignments revocation from SAP. It is removing most of the orphan privileges but some are not getting removed.

Please suggest some method to resolve the issue.

Regards,
Laxmibebi

Attachments

image.png (15.1 kB)
image.png (19.3 kB)
image.png (3.9 kB)