Why the “assign eligibility” button may be disabled for Privileged Identity Management