Hello Said. I would first suspect a UI rendering issue rather than assume they have been deleted. I came across a few similar community reports:
- Improved Automated Role Assignment: A contributor reported a browser-language-related display issue, which SailPoint confirmed was a non-English browser language issue and later fixed. Angelo also reported entitlement-based criteria disappearing from the role editor.
We have also seen recent API/UI mismatches involving source accounts, AD and DocuSign accounts, and entitlements.
I experienced something similar in my demo tenant. Accounts and entitlements were available through the API but missing from the UI, and they appeared the next day without any changes. These may be unrelated issues, but I think they are worth considering.
For your role, I would suggest checking a few things:
- Open Developer Tools and check the Network tab when the Define Assignment page loads. Compare the response with Get a Role. If both return all three criteria but the UI shows only one, that would point toward a rendering issue.
- Compare the visible and missing conditions under
membership.criteria, particularly the operators, attribute types,stringValueorvalues, and AND/OR grouping. Also confirm the referenced attributes or entitlements still exist. - Try another browser, check the Console for errors, and see whether the missing criteria reappear later.
I would avoid saving or rebuilding the role for now, as we do not know whether the UI would preserve those hidden conditions. It would also be worth checking a few existing role assignments to confirm whether this is only a display issue. If it persists, I would suggest opening a SailPoint Support case.
Are the missing criteria based on identity attributes, account attributes, or entitlements? Also, was the role modified recently through the UI or API?