IBM Support

Error 400: BMXAA0028E - Your security privileges do not allow access to the selected option. when adding new user to MAS

Troubleshooting


Problem

In the process to create a new user in MAS, during the synchronization to Manage, the following error in shown in the logs.
 
Exception: synched: status_code: 400 r.text Error 400: BMXAA0028E - Your security privileges do not allow access to the selected option. If you require access to this option, contact your system administrator.

DEBUG Checking authenticated user maxadmin for membership/access to workspace
DEBUG Authenticated user is maxadmin. Permissions are {'systemAdmin': True, 'userAdmin': True}

Cause

The error points to a security privilege issue, but it is not clear what is the exact privilege that is missing.
There are some places that must be verified.

Resolving The Problem

The following privileges and security settings must be reviewed.
From the System Properties app, check the mxe.int.dfltuser property. It is usually set as MXINTADM.
Confirm that MXINTADM and MAXADMIN users are in MAXADMIN group.
Confirm that MAXADMIN group has full access to Users and People applications.
Confirm that MAXADMIN group has full access to MASPERUSER object structure (including in Configure Object Structure Security option).
Confirm that MXINTADM user has the permissions to assign users to the security groups.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSRHPA","label":"IBM Maximo Application Suite"},"ARM Category":[{"code":"a8m3p000000F81QAAS","label":"Maximo Application Suite-\u003ESecurity"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.8.0"}]

Document Information

Modified date:
14 November 2022

UID

ibm16839133