Skip to Content

MXREF_MX_PRIVILEGE Cannot Be Removed. Privilege Deleted.

Oct 17, 2016 at 12:58 PM


avatar image

I have a user that has a direct privilege assignment. The actual privilege has been removed from the IDM Identity Store but the reference attribute is still on this user's account. I am unable to deleted the MXREF_MX_PRIVILEGE attribute referencing this non-existent privilege.


10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

2 Answers

Steffi Warnecke
Oct 18, 2016 at 07:59 AM

Hello Brandon,

are you on 7.2? And ´could you please add that as a user tag, that would help finding and recognizing it easier, too. :)


There is an internal function called uIS_RepairEntry. From the help:

"Repairs a given entry in the identity store by reconciling and rebuilding all assignments for this entry. The process will check against the internal data structure and rebuild assignments for the entry based on that information. It will add missing assignments, retry failed assignments and calculate validity for inherited assignments."

I have this in a small job, but my success rate is not very high (no errors, but it just does not find anything to repair). But maybe I'm not using it for the correct cases most of the time. ^^ Maybe this can help you get rid of the non-existing privilege.


When you say "tried to delete" I take it you tried it via a job and the {e} connector for "full force"? Or via the UI?




10 |10000 characters needed characters left characters exceeded
Prithviraj Rajpurohit Oct 18, 2016 at 10:04 AM


Please check below mentioned sapnote





10 |10000 characters needed characters left characters exceeded