JR64971: IBM RPA - <USER ACCOUNT IS DEACTIVATED> DUE TO DELETION OF ROLES/TEAMS

APAR status

• Closed as program error.

Error description

• User lockout is allowed on the Tenant, accounts are rendered
  inaccessible, and passwords cannot be restored. The teams do not
  have permissions for the user to open session, it is not allowed
  to open session in: Launcher, Studio or Tenant.
  
  
  When trying to log in, the following message is displayed:
  User account is deactivated
  
  Caused by user deleting the roles/steams, user managed to remove
  the roles of the administrative team
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Upon roles, teams or user update, a tenant administrator     *
  * could misconfigure accesses in such a way their tenant would *
  * end up with no administrators                                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Carefully manage teams, users and roles to avoid the problem *
  ****************************************************************
  

Problem conclusion

• A fix was delivered on 21.0.3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RPA

• Fixed component ID

  5737N5100

Applicable component levels