IDM 7.1-SP3 : Status Pending in Assign privilege

[former_member260648]

I am loggedin IDM UI with the user Administrators.

I see the tab "Self Services" and "Monitoring", bit i don't see the tab "To Do - Manage - View Reports - Hostory".

In the Tab "Self-Service" i have assigned 4 privileges to the administrator account : MX_PRIV:WD:TAB_DO , TAB_MANAGE,

TAB_HISTORY and TAB_REPORT.

But in the right side in "Assigned" are the 4 privileges in status pending?

Have you any idea what I did wrong ?

Thanks.

[Former Member]

Hi

Which worklfow-task did you use to assign these privileges? Maybe it has an Approval-Task defined or uses the entry type MX_PENDING_VALUE which causes the privileges to be "Pending"

What you could do to achieve your goal:

1) In MMC, click on your ID-Store, click on "Add User" and assign Manager privleges to the new user. Be sure he also exists in your AS Java/UME/Datasource.

2) Temporarily change the Workflow-Task "Change own data", add attribute MXREF_MX_PRIVILEGE. Then you can also self-assign privileges like MX_PRIV*

Delete the pending assignments before you do a reassignment.

Hope I could help.

Regards

Michael

[former_member260648]

Hi Michael,

i don't have workflow-task.

I have a problem about create user with assign manager privileges. I have a following error abou create user with manager privileges :

Error:

-

---

Method: Create user

Source: OraOLEDB

Error: 80040E2Fh (-2147217873)

Description: ORA-00001: unique constraint (MXMC_OPER.PK_MXI_VALUES) violated

ORA-06521: at "MXMC_OPER.MX_UTILSETATTRIBUTE", line 1447

ORA-06521: at "MXMC_OPER.MX_UTILSETATTRIBUTE", line 1791

ORA-06521: at line 1

-

---

so i can add user Administrator without manager privileges.

How can I assign the user Administrator with manager privileges ?

OS : HP UX 11.23 - Netweaver 7 /SP20 Java Stack - IDM 7 SP3 - Oracle Server 10.2.04

Windows XP - MMC - Oracle Client 10.2.0.1

About the oracle-error: Do i need to install Oracle Client 10.2.04 ?

[Former Member]

I have no experience with Oracle, sorry. But I suppose you tried "Add User" with username "Administrator" which already exists in your IdentityStore?!

What you can do to assign already existing user Administrator with Manager-privileges is:

Create a workflow task "Add Privilege"; entry type MX_PERSON, attributes MSKEYVALUE, MXREF_MX_PRIVILEGE & what you like; Access Control, Add, Allow access for Logged in User, Name: Administrator, On behalf of User or IdStore-entry.

Then you will have this task in WebUI/Self-Services and you can assign the desired privileges to this Administrator-User.

Also I would recommend to import the "SAP Provisioning framework" which has a lot of pre-configured WebUI-tasks.

Hope this helps.

Regards

Michael

[Former Member]

Hello

What ODBC Driver to you use?

[former_member260648]

Hello,

by import the "SAP Provisioning framework" i have the following error:

27.11.2009 13:34:49 :I:Creating task '61/Start Privilege Task (Ordered Group)'

27.11.2009 13:34:49 :I:Creating task '62/Start Trivilege Task'

27.11.2009 13:34:49 :I:Creating task '43/Initiate Parent Status'

27.11.2009 13:34:49 :I:Creating task '66/GRC Role (De)Assignment'

27.11.2009 13:34:49 :I:Creating task '67/GRC role (de)Assignment'

27.11.2009 13:34:49 :I:Creating task '68/Process (De)Assignments'

27.11.2009 13:34:49 :I:Creating task '69/Set Repeat TaskId'

27.11.2009 13:34:49 :W:Insert failed for

columns: WAITBEFORE,WFUSEADVANCEDSEARCH,RETRIES,WAITAFTER,MXPROTECTED,WAITDELAY,WFINWELCOME,INCLUDEDISABLEDENTRIES,BOOLSQLTYPE,USECONTEXTVARS,HARDPROVISION,WFFLAGS,ALLOWMULTIEVENTS,REPORTTASK,TASKID,ACTIONTYPE,TASKGUID,WAITRETRY,WFNODENYBUTTON,WFSAVEOPTION,RETRYDELAY,TASKTYPE,WFDISPLAYORDER,TASKNAME,ENABLED

values:[0, 0, 1, 0, 0, 30, 0, 0, -1, 0, 0, 0, 0, 0, 63, -1, F36F89D9-55A8-420B-835F-142FA2878C90, 0, 0, 2, 30, 1, 4, Pending Operation Failed (Ordered Group), 1]

27.11.2009 13:34:49 :F:Could not inserts tasks

27.11.2009 13:34:49 :I:Rolling back

[former_member260648]

Hello Christian,

i have ODBC driver: Oracle Provider for OLE DB

OraOLEDB10.dll

Version. 10.2.0.1.0

OLE DB Version: 02.01

[former_member260648]

Hi,

resolved - DISABLE CONSTRAINT from MXMC_OPER_.MXI_VALUES.