Now we've got it! 
No problem, IdM is pretty confusing.
Yes, see: You use MX_ASSIGNMENT. Please active MXREF_MX_PRIVILEGE in the attribute-list (you can deactivate MX_ASSIGNMENT) and try again to create an identity AND assign a privilege using that attribute.
Regards,
Steffi.
