# Rejoiner for roles where it was previously removed by Leaver LCM

**URL:** <https://developer.sailpoint.com/discuss/t/rejoiner-for-roles-where-it-was-previously-removed-by-leaver-lcm/84313>\
**Category:** IIQ Discussion and Questions\
**Tags:** lifecycle-management, roles, identityiq, provisioning\
**Created:** [October 8, 2024, 4:18am UTC](https://developer.sailpoint.com/discuss/t/rejoiner-for-roles-where-it-was-previously-removed-by-leaver-lcm/84313 "2024-10-08T04:18:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![infamous](https://avatars.discourse-cdn.com/v4/letter/i/df705f/32.png) [@infamous](https://developer.sailpoint.com/discuss/u/infamous)\
**Post date:** [October 8, 2024, 4:18am UTC](https://developer.sailpoint.com/discuss/t/rejoiner-for-roles-where-it-was-previously-removed-by-leaver-lcm/84313/1 "2024-10-08T04:18:42Z")

</div>

## Which IIQ version are you inquiring about?

8.4

## Share all details about your problem, including any error messages you may have received.

I have a use case whereby the staff has rejoined the organization after they have left. Previously when the staff has left, the assignment roles were removed by Leaver LCM.

Thereafter, when the user has rejoined, the roles were not automatically added back when running Identity Refresh. I understand that when roles are manually removed, they can’t be added back by the assignment again. Is there any one who may have a solution on this can be solved? Is removing from the xml the only way to clean up and what can be done for the future cases?  
This is currently in the user’s xml.

```auto
  <RoleAssignment assigner="xxx" assignmentId="bf64cbac8bdd4beda4665fa0e9ea266d" date="1726930920402" negative="true" roleId="64494f568d821f0b818d82bf2eb40047" roleName="xxx Birthright" source="RapidSetup"/>
            <RoleAssignment assigner="xxx" assignmentId="78826fab4ff74380a1c0f6ddbcd01ba5" date="1726930920402" negative="true" roleId="64494f358e5c1067818e5c20e0550055" roleName="xxx Staff Birthright" source="RapidSetup"/>
            <RoleAssignment assigner="xxx" assignmentId="53fbd34ad44a49a9b013bcd2f6a88735" date="1726930920402" negative="true" roleId="0af405f7905f168f81905fa6c0bc0025" roleName="xxx Birthright" source="RapidSetup"/>

```

---

<div class="post-metadata">

**Author:** ![pallavi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pallavi/32/17939_2.png) [@pallavi](https://developer.sailpoint.com/discuss/u/pallavi)\
**Post date:** [October 8, 2024, 5:15am UTC](https://developer.sailpoint.com/discuss/t/rejoiner-for-roles-where-it-was-previously-removed-by-leaver-lcm/84313/2 "2024-10-08T05:15:45Z")

</div>

Hi Andy,

Please refer to this discussion thread the solution suggested over there:

> [@Behavior of Removed Role in IdentityIQ](https://developer.sailpoint.com/discuss/t/behavior-of-removed-role-in-identityiq/79058):
>
> Which IIQ version are you inquiring about? Version 8.3 Share all details about your problem, including any error messages you may have received. Hello, I’m doing some tests with Roles, where I created a Business Role with a matching list for an attribute of the Identities. This Business Role has a Required IT Role with an entitlement. The Role was correctly assigned to the Identities with the matching attribute. I also tested removing the Role through access requests, which also correctly re…

Thanks,  
Pallavi

---

<div class="post-metadata">

**Author:** ![infamous](https://avatars.discourse-cdn.com/v4/letter/i/df705f/32.png) [@infamous](https://developer.sailpoint.com/discuss/u/infamous)\
**Post date:** [October 14, 2024, 12:23pm UTC](https://developer.sailpoint.com/discuss/t/rejoiner-for-roles-where-it-was-previously-removed-by-leaver-lcm/84313/3 "2024-10-14T12:23:42Z")

</div>

Is there anyway to do a cleanup through a rule to remove those xml that have the negative tag?

I tried to query the roleassignment class or assignment class using context.getObjectById with the assignment id but I get the exception of Exception running rule: The application script threw an exception: sailpoint.tools.GeneralException: Unable to locate persister: sailpoint.object.RoleAssignment

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [December 13, 2024, 12:24pm UTC](https://developer.sailpoint.com/discuss/t/rejoiner-for-roles-where-it-was-previously-removed-by-leaver-lcm/84313/4 "2024-12-13T12:24:24Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.