Pruning self reference in group hierarchy: Azure Active Directory - Mergers and Acquisitions: 46473d32-32d6-443a-b068-939c24fddc71

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,

When we try aggregate groups from Active Directory source we are getting the following warning:

Warning!

Pruning self reference in group hierarchy: Azure Active Directory - Mergers and Acquisitions: 46473d32-32d6-443a-b068-939c24fddc71

image
image538×218 10.8 KB

Is there any way to avoid this warning ?

Thanks in advance

2

Hi @saikumarS

Looks like this has been addressed in previous posts:
Pruning cyclical group hierarchy: Active Directory [source] Warning - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

This API call was the solution, the thread will provide some insight but making this call will avoid the warning:

PATCH - {{api-url}}/beta/sources/{{sourceId}}

[
    {
        "op": "add",
        "path": "/connectorAttributes/noGroupCycleDetection",
        "value": true
    }
]
4

Yeah looks like it may not actually resolve the issue:

You may want to double check the source config in VSCode, but if that key is not supported you may have to resolve the issue on AD, this description might help understand the issue:

Description: When groups are members of each other, forming a cyclic relation, it is termed as cyclic group hierarchy. For example:

  • GroupA is member of GroupB
  • GroupB is member if GroupC
  • GroupC is member of GroupA

The cyclic links between the groups are resolved during the Group aggregation. If the depth of the hierarchy is too deep within the Groups, the performance can be impacted for aggregation.