Not able to assign roles to users in IDM 7.1

[former_member298408]

Hi All,

We are facing an issue with one user while assigning role to him in IDM UI.

The error says: "

Unable to set value for attribute Assigned Roles, detailed information (may not be translated): Not allowed to add and remove a pending value entry simultaneously"

We checked in Display All Values Of An Identity and found that there was a pending MSKEYVALUE for user, for the same role and deleted it by running job in IDM Console.

Now, there are no pending values in UI, but the error is still there.

Could anyone of you please help!!!

Thanks

Aditi

[Former Member]

My IdM 7.1 is a bit rusty but I think you can doublecheck the existence of PVO

s pointing to a user not being listed in the UI using a query like:

select mskey,searchvalue from mxiv_values where attr_id = (select attr_id from mxi_attributes where attrname = 'MSKEYVALUE') and parentmskey=<mskey of the user>

This view should be available to oper and rt user account if I remember correctly. You might have to doublecheck the column names as I don't have a 7.1 or 7.2 system anymore. Another alternative is

select mskey,searchvalue from mxiv_sentries where attrname = 'MX_PENDING_VALUE' and parentmskey = <users mskey>

Br,

Per Christian, the 2nd