When granting overlapping Provisioning roles from Identity Manager, Provisioning Server etatrans.log shows the following error:
"Account for Global User '<username>' on Active Directory '<AD endpoint>' update failed: Existing account '<Employee name>' has not previously been correlated to this global user (by etaadmin) "
Identity Manager 14.x & v15
In Provisioning Manager, in the Domain Settings section under Synchronization, check the Automatic Correlation so it is activated.
Restart the Provisioning Server and try again.