@nikhlesh21 - What I used to follow and the best practice approach involves staging your configurations and using specific scripts to preview the impact on roles and attribute synchronization before enabling actual provisioning to the target systems.
- Leverage the “Preview” Feature for Identity Profiles
- Utilize PowerShell Scripts for Role and Attribute Sync Preview - A highly recommended approach from the SailPoint Developer Community is to use PowerShell scripts that leverage SailPoint APIs to simulate and report on the expected changes.
- Role Membership Preview (Get-RoleMembershipPreview.ps1)
- Attribute Sync Preview (Get-AttributeSyncPreview.ps1) Refer - Preview role and attribute sync changes with PowerShell - Content / Video Library - SailPoint Developer Community
- If possible or your end customer allowed → Staged Rollout and “Dummy” Target Systems → Configure this source to point to an isolated Organizational Unit (OU) or a completely separate test AD domain. Once validated, re-point the configurations to the live AD source.
Regards,
Kannan