Skip to Content

Archived discussions are read-only. Learn more about SAP Q&A

Assignment status showing 'Not Allowed' on IDM UI

Hi Experts,

On IDM User Interface we are having privilege assignments to users which are showing status "Not Allowed". Is there any way to fix it ? Role Assignment has not been completed so it was showing 'Pending' status.


I have tried to fix the issue at database level using below SQL query to make assignment 'Rejected'.


UPDATE mxi_link SET mcexecstate = 1026 WHERE

mcThismskey = <usermskey> and mcOthermskey = <privmskey> AND mcOrphan=0 AND

mcLinkType = 2 AND mcLinkState < 2

but the assignment is showing 'Not Allowed' status, also i have deleted the assignment link in the database.

Delete from mxi_link where

mcThismskey = <usermskey> and mcOthermskey = <privmskey> AND mcOrphan=0 AND

mcLinkType = 2 AND mcLinkState < 2

and tried role assignment again but still assignment status showing 'Pending' and then 'Not Allowed', i have also used re-consile/repair entry functions to fix this issue but not any luck.

We have implemented 'Context Based Assignment provisioning', this is the reason if any issue with context based assignment.

Experts, Please suggest the solutions.

Not what you were looking for? View more on this topic or Ask a question