Chris Nackers

ConfigMgr / SCCM

ConfigMgr 2012 - Custom Security Roles and RBAC_SyncPermissions Error

2012-09-10

From the archive (2012). Written for the tools of the time, so some details may be out of date.

I recently had a client where we had created a number of custom security roles and we had them defined over 24 different groups.  After working with the ConfigMgr product team we were able to resolve the issue. I wanted to post this for anyone else that might run into the issue, since there were literally zero search results when I was looking for information on the error. This was happening on ConfigMgr 2012 RTM Build 7711.

Errors:

We were seeing errors in the component status nearly every 30 seconds.

The error in component status was:

“Microsoft SQL Server reported SQL message 50000, severity 16: [42000][50000][Microsoft][SQL Server Native Client 10.0][SQL Server]Get Error Error Number 8672 Severity 16 State 1 Procedure spRBAC_SyncPermissions_Objects Line 91 Message The MERGE statement attempted to UPDATE or DELETE the same row more than once. “

The errors in hman.log were:

Failed : Sync SMS Admins group memberships status : -1 , last error : 997

*** [42000][50000][Microsoft][SQL Server Native Client 10.0][SQL Server]Get Error Error Number 8672 Severity 16 State 1 Procedure spRBAC_SyncPermissions_Objects Line 91 Message The MERGE statement attempted to UPDATE or DELETE the same row more than once. This happens when a target row matches more than one source row. A MERGE statement cannot UPDATE/DELETE the same row of the target table multiple times. Refine the ON clause to ensure a target row matches at most one source row, or use the GROUP BY clause to group the source rows.. : spRBAC_SyncPermissions

Resolution:

The resolution thankfully was a very simple one.  I simply had to create a custom security role. Then delete it a few minutes later. This somehow jump started everything and the issue was gone within a few minutes.