To be able to manage roles in IM User Console that are created in Provisioning Manager, you can reset the role ownership to Identity Manager administrator as described in the tech doc here.
When opening the "Reset Provisioning Role Owners" in User Console", an error pops up stating "Error: No item found".
The below error message can be seen logged to server.log.
2024-09-03 16:44:15,507 DEBUG [ims.llsdk.directory.jndi] (default task-26) Acquiring new LDAP connection
2024-09-03 16:44:15,589 DEBUG [ims.llsdk.directory.jndi] (default task-26) Acquired LDAP connection (com.netegrity.llsdk6.imsimpl.directory.jndi.LdapOps@449fdacd)
2024-09-03 16:44:15,589 DEBUG [ims.jdbc.JDBCManagedObjectProvider] (default task-26) SELECT DISTINCT("IM_TAB"."UNIQUE_NAME") FROM "IM_TAB" WHERE "TASKOID"='780' AND "IM_TAB"."ENV_OID"='3'
2024-09-03 16:44:15,589 DEBUG [ims.jdbc.JDBCManagedObjectProvider] (default task-26) SELECT DISTINCT("IM_TAB"."UNIQUE_NAME") FROM "IM_TAB" WHERE "TASKOID"=? AND "IM_TAB"."ENV_OID"=? (780,3)
2024-09-03 16:44:15,592 DEBUG [ims.plugins.pluginmgr.environment.extreme] (default task-26) Getting plugins for environment "identityEnv" and key "taskFilter".
2024-09-03 16:44:15,592 DEBUG [ims.plugins.pluginmgr.environment.extreme] (default task-26) Found 0 environment-specific plugins for this key.
2024-09-03 16:44:15,592 DEBUG [ims.plugins.pluginmgr.environment.extreme] (default task-26) Found 0 global plugins for this.
2024-09-03 16:44:15,593 DEBUG [ims.llsdk.typeregistry] (default task-26) Did not find definition for type UNKNOWN
2024-09-03 16:44:15,594 DEBUG [ims.jdbc.JDBCManagedObjectProvider] (default task-26) SELECT "IM_SCREEN"."UNIQUE_NAME", "TAG", "MANAGEDOBJECTTYPE", "SCREENDEFOID", "FRIENDLYNAME" FROM "IM_SCREEN" WHERE "UNIQUE_NAME"=? AND "ENV_OID"=? (784,3)
2024-09-03 16:44:15,594 DEBUG [ims.jdbc.JDBCManagedObjectProvider] (default task-26) Is scroll insensitive result set type: true
Is forward only result set type: false
2024-09-03 16:44:15,595 DEBUG [ims.jdbc.JDBCManagedObjectProvider] (default task-26) No results found from the query: SELECT FROM WHERE "UNIQUE_NAME"='784'
2024-09-03 16:44:15,595 ERROR [ims.ui] (default task-26) No items found No object of type IM SCREEN found for identifier '784'
at com.netegrity.llsdk6.imsimpl.jdbcmanagedobject.JDBCManagedObjectProvider.getManagedObject(JDBCManagedObjectProvider.java:430)
at com.netegrity.llsdk6.imsimpl.jdbcmanagedobject.JDBCManagedObjectProvider.getManagedObject(JDBCManagedObjectProvider.java:273)
at com.netegrity.llsdk6.imsimpl.provider.ScreenProviderImpl.getScreenByOid(ScreenProviderImpl.java:101)
at com.netegrity.llsdk6.imsimpl.managedobject.TaskImpl.getPrimarySearchScreen(TaskImpl.java:1173)
at com.netegrity.ims.task.TaskSessionImpl.allocateSearchHandler(TaskSessionImpl.java:1743)
at com.netegrity.ims.task.TaskSessionImpl.initializeTaskSession(TaskSessionImpl.java:1572)
at com.netegrity.ims.task.TaskSessionImpl.<init>(TaskSessionImpl.java:1465)
at com.netegrity.ims.task.TaskSessionImpl.<init>(TaskSessionImpl.java:1455)
at com.netegrity.ims.task.TaskSessionImpl.<init>(TaskSessionImpl.java:1429)
at com.netegrity.ims.businessprocess.TaskServiceImpl.createTaskSession(TaskServiceImpl.java:215)
at com.netegrity.webapp.page.TaskController.getTaskSessionByTag(TaskController.java:2615)
at com.netegrity.webapp.page.TaskController.createTaskControllerByTaskTag(TaskController.java:2303)
at com.netegrity.taglib.skin.TagUtilLocal.update(TagUtilLocal.java:247)
at com.netegrity.taglib.skin.UpdateTag.doEndTag(UpdateTag.java:146)
at org.apache.jsp.app.ui7.index_jsp._jspx_meth_skin_005fupdate_005f0(index_jsp.java:1831)
at org.apache.jsp.app.ui7.index_jsp._jspService(index_jsp.java:230)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:791)
at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:433)
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:403)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:347)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:791)
at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
...
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1985)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1487)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1378)
at java.lang.Thread.run(Thread.java:750)
Identity Manager v14.4.2
When examining the admin task "Reset Provisioning Role Owners", the Search Screen option under Search tab was set to Default Multiple Provisioning Roles Owner Search.
Setting the screen definition to "Default Provisioning Role All Search" solved the problem.