Remove entitlements before deleting account

IdentityIQ (IIQ) IIQ Discussion and Questions
, , , ,
1

Which IIQ version are you inquiring about?

8.2

Share all details about your problem, including any error messages you may have received.

Hi Sailors

I have use case where i have to delete the account if the last entitlement is being removed from the account. This removal request can be come from any source like access request or certification. This is jdbc connector where we have placed all the rules as per the operations.

To achieve this i have added the before provision rule on the application and there i am checking if the removing entitlement is the last entitlement then add the another account request to delete the account from application. But before removing entitlement account is getting deleted so remove request is getting failed since account is already deleted.

is there any way to control the sequence of execution in jdbc connector? or any alternate approach for this use case?

Regards
Ankush

2

Hej Ankush,

instead of using BeforeProvisioning rule, you should use for this use case an AfterProvisioning one, where you check if no entitlements are left, then add one more account request with operation delete.

Br,
Renad

Br,
Renad