Hi,

I've create RoleA. Idea is to mimic Administrative role but not tick "Administrative rights" check box.

This role is mainly for ID team to enable/disable, assign Roles to EmplDept.

RoleA

• User Rights: I've assigned default "General full access"
• Functional Rights: Custom "ID functional right" - this is required, as they only need to see Organzation function. Thats another reason i cant use 'administrative rights' check box.
• Access Restriction: Custom to only allow ID mgmt role to be able to update the values

Issue:

One of the requirement is to remove the values in "Authorized user roles". Meaning ID team needs to tick and click Delete - to remove the role, then clear our the Roles used on connection.

On AM Web: The "Add" and "Delete" button is disabled/greyed out. 

On AM Client: I'm able to remove the Authorized user roles, but cannot add. Prompts this error "Unable to complete operation in current state."

Any ideas whats the cause?

TIA!