Hi Team,
Configured one it role with role provisioning policy to update the Extension attribute value in AD. Whenever user submitted a request for business role value is getting updated for EA but EA value is not removing if user submitted removal requests
Can you please suggest on thus
@sureshbommareddy98
You have to handle this in before provisioning rule, check if the request is role based and removal of that role and add the attribute request to remove the value to the Provisioning plan.
You can handle this in your LCM provisioning workflow as well
When a request is made to remove a role, the workflow generates a plan to remove the role, and an AttributeRequest is created with ‘remove’ operation for the corresponding Extension Attribute. In this case, the EA value should be removed from the target system.
If the EA value is not being removed, it could be due to a permission issue preventing the removal.
To troubleshoot this:
1.Check the plan trace in the Before Provisioning Rule to confirm whether a Remove operation is being generated for the EA.
2.If the Remove operation is not working for EA, you can explicitly update the plan to set the EA value to null or a blank value during the Before Provisioning Rule.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.