Automatic roles assigned

[AdamVentum (Adam Waszak)]

IIQ version 8.4p1

Hi and Hello,

We have automatic roles that should be assigned and detected depending on the attribute on the identity. The roles are connected to AD.

The attribute changes correctly and the roles are saved correctly to the accounts. Unfortunately, the old roles do not removed, after a few attribute changes they even duplicate.

I have the correct roles as assigned. Those that should disappear after refresh are still detected.

I have success in the transaction. I do not see an error in the roles. There are diffrent requirements for the appropriate roles. The old ones do not disappear.

I am waiting for each answer.

best regards,
Adam

[vishal_kejriwal1 (Vishal Kejriwal)]

@AdamVentum

Those that should disappear after refresh are still detecte

Assigned role is removed but still detected is on identity ? Does the corresponding entitlements are removed ?

[vishal_kejriwal1 (Vishal Kejriwal)]

Also do you having some setting that don’t remove entitlements if the roles are removed ?

[AdamVentum (Adam Waszak)]

@vishal_kejriwal1
Thank you for answer.

First question,
entitlements are no removed.

Second question,
No. I have only rights to asigne when is active and have attribute. Attribute is change so I want to change asigne roles.

Regards,
Adam

[vishal_kejriwal1 (Vishal Kejriwal)]

What is value for below 2 ?
Retain assigned entitlements when detected roles are removed
Retain assigned entitlements when assigned roles are removed

[AdamVentum (Adam Waszak)]

@vishal_kejriwal1
I want also delete “assigned entitlements when detected roles are removed” and
delete “assigned entitlements when assigned roles are removed”

but maybe here I can use some options.

Regards,
Adam

[vishal_kejriwal1 (Vishal Kejriwal)]

You need to unselect both the options.

[AdamVentum (Adam Waszak)]

Yes. I do not have any of this option. I should have any other? I only choose some option on refresh task. Do I need do something more somewhere?

[vishal_kejriwal1 (Vishal Kejriwal)]

What option did you chose ? Share the screenshot ?

[vishal_kejriwal1 (Vishal Kejriwal)]

Just try with
Provision assignment and Refresh assigned, detected roles, and promote additional entitlements