Sticky appear after refresh

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?8.2

I have a sod policy run the task check active policy, the policy is activated and a rule runs. this rule should remove an AD group from a user.
when i run a refresh task and and when I go to entitlements the group is there

    AccountRequest accountRequest = new AccountRequest();
    accountRequest.setApplication(applicationName);
    accountRequest.setOperation(AccountRequest.Operation.Modify);
    
    log.debug("CGD_Rule_SOD_Policy_EXIMBILLS_Action_By_Alerts:: Creating Attribute Request..."); 

    AttributeRequest attrRequest = new AttributeRequest(
      entitlementName, 
      ProvisioningPlan.Operation.Remove,
      adGroupToRemove);

    attrRequest.put("preferRemoveOverRetain","true");
    attrRequest.put("assignment","true");
    
 

    accountRequest.add(attrRequest);
    plan.add(accountRequest);

		
    log.debug("CGD_Rule_SOD_Policy_EXIMBILLS_Action_By_Alerts:: Executing Provisioning..."); 
    log.debug("CGD_Rule_SOD_Policy_EXIMBILLS_Action_By_Alerts:: Executing PLAN..." + plan.toXml());
    
    Provisioner provisioner = new Provisioner(context);
    provisioner.execute(plan);
2

Which value you put in adGroupToRemove?
and, do you have some BR that can reassing this AD group?

3

Hello
adGroupToRemove is something like “cn=xxxxx,ou=xyz,…”

This is not associated with any role