Identities still assigned to Deleted Role

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

We deleted a role (ex. GCP Test) a few days ago. When an Identity Refresh occurs, a few identities show “Remove assignedRoles: GCP Test”. The refresh seems to complete successfully, but then the same thing occurs again the next time the Identity Refresh runs.

When we run the api: /identities/:identityId/role-assignments, the deleted role shows up for the Identity. But we do not see the Role in the Role List.

Is there a way to remove this role-assignment? Or do we need to open a support ticket?

2

Hi @Carlatto - How did you delete the role?

3

Through the UI.

image
image251×170 3.88 KB

4

Hi @Carlatto Can you run a full (unoptimized) aggregation or reload the accounts from source?

Thanks

5

Ran an unoptimized aggregation on our Authoritative Source, no change. Identity Refresh is still showing the deleted role.
image

6

Sounds like a support ticket to me.

7

Thanks for the suggestions, we are opening a support ticket.