Account creation after role assignment

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello,
I’m facing an issue when creating new roles to assign to accounts that meet specific criteria. My accounts are aggregated from an Oracle HCM source, and the corresponding identities are created. I’ve set up two different roles that should be automatically assigned to all accounts in the “Active” lifecycle state, as is the case for accounts aggregated from HCM. I expect that assigning these new roles would trigger the creation of an account on the target application, but this is not happening.
Can you help me understand the issue?

2

Hello @l_pulignano ,

You are right , role provisioning should happen ideally .
Can you confirm the following :

  • Have you tried provisioning access through request based ? If yes,Does it work ?
  • Have you checked if the Identity’s already has account in the target system ?
  • Make sure the role is enabled.
  • Apply changes on the role UI page for a refresh.
3

@l_pulignano How are you setting up the roles? I would recommend create a Role add the Access Profile and attach the Oracle HCM entitlement to it then adjust your criteria and run tests. If configured properly it should work when the user is in a Active lifecycle state.

4

the account that should be created is for the AD source. In fact the role contains access profile from the AD source, but the correspondent account is not created

5

Have you checked the logs via SEARCH?
What error messages are you getting?

6
  1. Make sure the access profiles & roles are enabled and click on Apply Changes in Access Profile & Roles list page and see whether the identity assigned to that Role. If not, then check the role criteria and compare the values with actual attribute values.
  2. If identity assigned to the Role, check the AD source’s create provisioning plan and verify any provisioning error occurs.
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.