# Group Aggregation clearing out entitlements after running

**URL:** <https://developer.sailpoint.com/discuss/t/group-aggregation-clearing-out-entitlements-after-running/20104>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, aggregation\
**Created:** [November 1, 2023, 8:41pm UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-clearing-out-entitlements-after-running/20104 "2023-11-01T20:41:08Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![langn](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@langn](https://developer.sailpoint.com/discuss/u/langn)\
**Post date:** [November 1, 2023, 8:41pm UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-clearing-out-entitlements-after-running/20104/1 "2023-11-01T20:41:08Z")

</div>

Currently we have Radiant Logic connected to IIQ using the LDAP connector. We have both an Application account and group aggregations setup. Both the Account and Group aggregations worked when when setup the app. Now only the account aggregation is working. We run the account aggregation and it pulls in users and entitlements. When we run the group aggregation it is clearing out all the entitlements the account aggregation pulled in.  
We do need to have both aggregations work as we will have some entitlements that will not be associate to a user that we need to make sure get pulled in using the group aggregation.

Looking to see if anyone has ran into this before. We have had a ticket open with sailpoint now for a couple of weeks and no one has been able to point us to what might be causing this.

---

<div class="post-metadata">

**Author:** ![Jarin\_James](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jarin_james/32/3372_2.png) [@Jarin\_James](https://developer.sailpoint.com/discuss/u/Jarin_James)\
**Post date:** [November 2, 2023, 5:56am UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-clearing-out-entitlements-after-running/20104/2 "2023-11-02T05:56:10Z")

</div>

Hi @langn,

Just a couple questions to get clarity on your issue.  
Are you promoting the entitlements to managed attribute during account aggregation?  
Is the group aggregation providing you with all the entitlements in the application, including the one which was pulled in via account aggregation.?

---

<div class="post-metadata">

**Author:** ![langn](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@langn](https://developer.sailpoint.com/discuss/u/langn)\
**Post date:** [November 2, 2023, 1:49pm UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-clearing-out-entitlements-after-running/20104/3 "2023-11-02T13:49:27Z")

</div>

Are you promoting the entitlements to managed attribute during account aggregation? **Yes, we are**  
Is the group aggregation providing you with all the entitlements in the application, including the one which was pulled in via account aggregation.? **It is**

---

<div class="post-metadata">

**Author:** ![Remold](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/remold/32/3275_2.png) [@Remold](https://developer.sailpoint.com/discuss/u/Remold)\
**Post date:** [November 2, 2023, 2:00pm UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-clearing-out-entitlements-after-running/20104/4 "2023-11-02T14:00:32Z")

</div>

Have you defined the entitlements as type of Group, like:

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/b/b2b0aa2dc97e75014b46b35e7d804df2d33af2be.png)

In the Group Aggregation task, do you have `Detect deleted account groups` enabled ?

Is the SearchDN configured correctly? Do you have configured a Iterate Search Filter?

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/f/f3a8ceada1da1ab9768058782b621ba58608249e.png)

From the Schema, did you test using the ‘Preview’ button below the group schema?

Does the command `connectorDebug` in the IIQ Console provide any results?

– Remold

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [January 1, 2024, 2:00pm UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-clearing-out-entitlements-after-running/20104/5 "2024-01-01T14:00:36Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.