Your company's ad could live here and reach over 50,000 people a month!

Share This Post

ConfigMgr 2012 – Custom Security Roles and RBAC_SyncPermissions Error

I recently had a client where we had created a number of custom security roles and we had them defined over 24 different groups.  After working with the ConfigMgr product team we were able to resolve the issue. I wanted to post this for anyone else that might run into the issue, since there were literally zero search results when I was looking for information on the error. This was happening on ConfigMgr 2012 RTM Build 7711.

Errors:

We were seeing errors in the component status nearly every 30 seconds.

The error in component status was:

“Microsoft SQL Server reported SQL message 50000, severity 16: [42000][50000][Microsoft][SQL Server Native Client 10.0][SQL Server]Get Error Error Number 8672 Severity 16 State 1 Procedure spRBAC_SyncPermissions_Objects Line 91 Message The MERGE statement attempted to UPDATE or DELETE the same row more than once. “

The errors in hman.log were:

Failed : Sync SMS Admins group memberships status : -1 , last error : 997

*** [42000][50000][Microsoft][SQL Server Native Client 10.0][SQL Server]Get Error Error Number 8672 Severity 16 State 1 Procedure spRBAC_SyncPermissions_Objects Line 91 Message The MERGE statement attempted to UPDATE or DELETE the same row more than once. This happens when a target row matches more than one source row. A MERGE statement cannot UPDATE/DELETE the same row of the target table multiple times. Refine the ON clause to ensure a target row matches at most one source row, or use the GROUP BY clause to group the source rows.. : spRBAC_SyncPermissions

Resolution:

The resolution thankfully was a very simple one.  I simply had to create a custom security role. Then delete it a few minutes later. This somehow jump started everything and the issue was gone within a few minutes.

Share This Post

I am a Microsoft MVP for System Center Configuration Manager and owner of Nackers Consulting Services, LLC. I focus primarily on System Center Configuration Manager and the Microsoft Deployment Toolkit. In addition to helping clients leverage the technologies they use, I enjoy spending a lot of time on the forums and email lists helping answer questions and just seeing what people are doing with the deployment technologies available to them. I have spoken at Microsoft Management Summit on ConfigMgr/MDT integration and I have spoken at user groups around the country. If you have any questions, please feel free to contact me, I am always willing to help.

Leave a Reply