I was playing around the Security Groups and Users module and I came across an error message that didn’t really make sense to me. I had logged into Maximo as a user that I created, actually duplicated from the Maxadmin user, so I have all the exact same rights as Maxadmin. I opened the Users module and tried to add a security group to one of them and I got this error:
“Your security privileges do not allow access to the selected option, If you require access to this option, please contact your System Administrator”
Here I was thinking, how could this be? I am a Maximo administrator. I double checked my security profile and sure enough I had rights to do everything. OK, so I logged off and logged back in as maxadmin. I tried to do the same thing and sure enough, I was able to add a security group to any user. This baffled me. So what could it be?
I finally googled the error and found an article on IBM support site. It basically said that the logged in user must be authorized to reassign groups. So to enable a user for “Authorize Group Reassignment”, log in as maxadmin and go into the Security Groups module and select the MAXADMIN group. Go to Select Action -> Authorize Group Reassignment. In that dialog, click on New Row and add the user you want to have this privilege. Once you save it, that user now has the ability to assign and reassign groups to new users.
This process isn’t very intuitive and very confusing even for a pro like us. My question is this, how come IBM developed it like this? Is there a reason adding this one dialog for this one purpose. I would assume that if you assign to the MAXADMIN group, you would automatically have rights to do this simple task. [IBM Support]