Return
-
Title
Unable to Manage Accounts in Active Roles - Options Greyed Out Even for FullAdmin Users -
Description
Service Desk operators and/or even Active Roles FullAdmin users are unable to manage accounts in Active Roles.
-
Cause
The "Exclude from Management Scope" policy enforces a read-only state on any object within its scope, preventing modifications regardless of the administrator's permissions - including users assigned the Active Roles FullAdmin role.
-
Resolution
Remove or block the "Exclude from Management Scope" Policy Object so that the accounts are no longer in scope.