When looking at a task in MTCA SSM, there is no option to change current/desired states, it only shows the static values. The parameter ssmAllowUpdates is already set to "true" in the conf.yaml file:
ssmAllowUpdates: true
Release : 14.0
Component : OPS/MVS
User didn't have update access to the resource OP$MVS.SQL.table in the external security package (RACF, TSS or ACF2)
From documentation:
A user is authorized if they have UPDATE access to the SAF resource named OP$MVS.SQL.table on the selected system, where table is the name of the SSM resource table that contains the selected resource definition and OP$MVS is the value of the EXTSECPREFIX parameter for the selected CA OPS/MVS subsystem.