ConfigMgr 2012 - Custom Security Roles and RBAC_SyncPermissions Error
I recently had a client where we had created a number of custom security roles and we had them defined over 24 different groups. After working with the ConfigMgr product team we were able to resolve the issue. I wanted to post this for anyone else that might run into the issue, since there were literally zero search results when I was looking for information on the error. This was happening on ConfigMgr 2012 RTM Build 7711.
Errors:
We were seeing errors in the component status nearly every 30 seconds.
The error in component status was:
“Microsoft SQL Server reported SQL message 50000, severity 16: [42000][50000][Microsoft][SQL Server Native Client 10.0][SQL Server]Get Error Error Number 8672 Severity 16 State 1 Procedure spRBAC_SyncPermissions_Objects Line 91 Message The MERGE statement attempted to UPDATE or DELETE the same row more than once. “
The errors in hman.log were:
Failed : Sync SMS Admins group memberships status : -1 , last error : 997
*** [42000][50000][Microsoft][SQL Server Native Client 10.0][SQL Server]Get Error Error Number 8672 Severity 16 State 1 Procedure spRBAC_SyncPermissions_Objects Line 91 Message The MERGE statement attempted to UPDATE or DELETE the same row more than once. This happens when a target row matches more than one source row. A MERGE statement cannot UPDATE/DELETE the same row of the target table multiple times. Refine the ON clause to ensure a target row matches at most one source row, or use the GROUP BY clause to group the source rows.. : spRBAC_SyncPermissions
Resolution:
The resolution thankfully was a very simple one. I simply had to create a custom security role. Then delete it a few minutes later. This somehow jump started everything and the issue was gone within a few minutes.