Issue with Account Aggregation Query Not Returning Complete Data

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hi everyone,

I’m encountering an issue with an account aggregation query in SailPoint IdentityIQ (IIQ). When I run this query directly in the database, it returns all the expected results. However, when I execute the same query within IIQ, it seems that not all the data is retrieved, resulting in incomplete information in the aggregation.

Specifically, the problem seems to involve users who have a multivalue field for permissions. In some cases, IIQ aggregates and displays multiple permissions for a user, but in other cases, only one permission is returned, even though the user has more permissions in the database.

Has anyone experienced something similar, or does anyone have recommendations for adjustments in IIQ that might allow the query to pull in the full set of results, particularly with respect to multivalue fields?

Thanks in advance for any help!
Antonio.

2

@AntonioGvtt,

Double check your account schema attribute is marked as multi, managed and entitlement.

3

Hi Antonio,

Is the select query using an order by primary identifier?

Ex: Select id, permissions from table order by id;

Regards
Arjun

4

@AntonioGvtt

Please make sure your query is returning the results in order by username condition and check this if it is working.

5

There are multiple things to check.

  1. Check your merging configuration, unique identifier for merging.
  2. Schema attribute make sure multi valued are selected as multi and group attributes as managed and entitlement.
  3. If you have any BuiildMap and Customization rule and dropping any record.
  4. From IIQ console run “connectorDebug iterate” and look for the account which is missing the values. check with rules and without to see if rules causing issue.
  5. Do you have any delta aggregation queries?

-N

6

Thank you all for the response, the issue was that I wasn’t sorting by the primary identifier.

7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.