Hi Experts,
On IDM User Interface we are having privilege assignments to users which are showing status "Not Allowed". Is there any way to fix it ? Role Assignment has not been completed so it was showing 'Pending' status.
I have tried to fix the issue at database level using below SQL query to make assignment 'Rejected'.
UPDATE mxi_link SET mcexecstate = 1026 WHERE
mcThismskey = <usermskey> and mcOthermskey = <privmskey> AND mcOrphan=0 AND
mcLinkType = 2 AND mcLinkState < 2
but the assignment is showing 'Not Allowed' status, also i have deleted the assignment link in the database.
Delete from mxi_link where
mcThismskey = <usermskey> and mcOthermskey = <privmskey> AND mcOrphan=0 AND
mcLinkType = 2 AND mcLinkState < 2
and tried role assignment again but still assignment status showing 'Pending' and then 'Not Allowed', i have also used re-consile/repair entry functions to fix this issue but not any luck.
We have implemented 'Context Based Assignment provisioning', this is the reason if any issue with context based assignment.
Experts, Please suggest the solutions.