"Active Roles" tab displays no data in Manager (228540)

"Active Roles" tab displays no data in Manager

When selecting the "Active Roles" tab in Manager for a group or for the domain object, there is a message stating:

"You do not have sufficient permissions to view data in the category 'Active Roles'!"

Domain:



Group:



For a user account, the available fields, "Deprovisioning status" and "Deprovisioning date" are read only:



When viewing the ActiveRoles Server (ARS) columns (e.g. edsvaSecondaryOwners, etc.) in Object Browser there is a lock icon on the column name.  Hovering over the icon gives the message, "Locked by ARS.Customizer.ADSGroup":

1. The customizer code does not return a value of ARS for 'SystemType' for the DPRSchema entry.  In other words, the synchronization project is not correctly registered as using the ActiveRoles connector.  This is because the configuration parameter, TargetSystem\ADS\ARS_SSM, was not enabled before the sync project for ARS is created.

2. Alternately, the sync project has been created, but the configuration parameter, TargetSystem\ADS\ARS_SSM, has not been enabled.  Thus the DPRSchema entry is incomplete, and some of the ARS columns, e.g. edsvaSecondaryOwners, are not yet present.

Please review the Administration Guide for Dell™ Active Roles Integration before implementing ARS as a target system for setup and configuration information.  

Ensure that TargetSystem\ADS\ARS_SSM is enabled and the database has been compiled before creating a new sync project for the ARS target system connector (Active Roles Connector).

Enabling the configuration parameter TargetSystem\ADS\ARS_SSM may not be sufficient to resolve this issue.  Thus it may be necessary to delete the existing sync project(s) and recreate the Active Roles Synchronization project to create the DPRSchema entry correctly and correct the permissions for the customizer.