Skip to Content
avatar image
Former Member

All Privileges stay on pending state

Hi fellow IDM gurus

I have a situation where all privileges assigned to users on IDM stays on pending state.

How to find out what is blocking the privilege assignment process. I have noticed

that this occurs on some point on my development system... I haven't been able to find out what is causing this behaviour

Earlier I have got rid of this by resetting the ID Center - but Go-Live is getting nearer and nearer and I would like to understand now where this comes from...

Any hints where to start looking?

IDM 7.2 SP5 on Oracle with one Dispatcher

Kind Regards


Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

1 Answer

  • avatar image
    Former Member
    Jan 09, 2013 at 11:58 AM

    You didn't forget to assign the master privielege as well? Anyway, the text "pending" should be a link. Clicking on it should give more information. Please post a screenshot if you're not sure how to interpret this...

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      I opened SAP customer message and with SAP technician we found out the One my customized task contained semicolon (;) in condition query - it didn't report any error it just stop to that task..

      That was towarsds ECC

      And after we found and fixed that there was one task was someway corrupted and by disabling and enabling it removed the block - and that was toward AD..

      Here is SQL queries we used to find blocking tasks ..

      Find Provistioning tasks pending

      select auditref from mxp_provision where actionid = 601

      select count(*) from mxp_provision

      Find Audit ref

      select * from mxp_provision order by auditref desc

      Find Task ID

      select * from mxp_audit where auditid = 37284

      Find tasks

      select t.taskname,a.* from mxp_ext_audit a,mxp_tasks t where a.aud_task = t.taskid and a.aud_ref = 37284 order by aud_datetime

      -- I don't remember what this was - I suppose finding if user has Account attribute for repository

      select count(mskey) from idmv_value_basic_all where mskey=143446 and attrname in

      (SELECT 'ACCOUNT'||REP_NAME FROM mc_repository where REP_ID=61);

      Find Queries with semicolon

      select * from mxp_tasks where boolsql like '%;%'