During testing I attempted to revoke access to an Access Profile by going to the Access Profile, navigating to “Manage Entitlements”, looking at the associated entitlement, and then the identities menu.
The user in question is an admin and this is their admin account I am attempting to revoke access from. I noticed, unlike the other users, the admin account is missing a lifecycle state.
Upon selecting “Revoke” I received a prompt that said “Warning Error: Please contact your administrator”
I am trying to determine why I cannot revoke access from this admins identity. Secondly, is it normal for Admins to not have a set lifecycle state? That is how our implementers set up our accounts and I’m not sure if that’s just best practice?
Check whether any backend tasks are executing or any revoke is pending for the identity by using Pending Tasks API. Generally you will get this error when you are trying to revoke the access and the same task is pending for an identity.
If you are not implemented a lifecycle state to the Admin Identity Profile, then it will not set. Admins are the elevated privileged account hence it will not considered with JML process. On a best practice, it is good to give an Admin User Level access to the employee profile to handle the administrative tasks and keep the less number of Admin accounts.
I ran that API call and searched for the user by name and ID but nothing came up. Is there a way to run that API call for a specific user? Or is it all-or-nothing? When searching the term “Revoke” it didn’t find anything. I’m also not seeing any tasks regarding the specific access profile.
