Which IIQ version are you inquiring about?
[8.4 p2]
We updated from 8.2 p6 to 8.4 p2
We see messages in log about BundleProfileRelationServiceSynchronizer.
Question is what is this class, when was it introduced and what is it good for?
Thank you
I believe it was introduced in version 8.3. Here is the documentation that provide details about this new feature. Refer to the “Role Management & Analysis” New Feature.
1 Like
@opalyvoda check here
In 8.3 a new feature was added along with a service called Bundle Profile Relation service. This is referenced in the IdentityIQ 8.3 New Features section, in the table row for Role Management & Analysis.
A new Role-Entitlement Associations task analyzes each role in the system and creates associations between the role and any granted entitlements. This task is run by default when upgrading from an earlier version of IdentityIQ to the current version; once it has been run, IdentityIQ automatically updates the relationship table any time changes are made to role profiles, so in an upgrade scenario, you do not need to run the task independently of the upgrade process in order to establish these relationships.
We have seen customers who have issues with Role Bundles seeing more errors related to this service, due to malformed Bundle objects or data corruption. An example of this type of issue is a Role which is missing a Profile entry, when one is expected.
When you upgrade to 8.3, there is part of the upgrade which readies the environment for this new feature, but there is also an on-demand task which can be executed, called Role-Entitlement Association task. You could try executing the task in this environment having the error, to see if possible there were roles added since the upgrade which did not get updated, or to flush out an error when the task runs.
One more thing, if you upgraded your system from 6.4 then make sure your don’t have Bundle and ManagedAttribute (You can search ObjectType with FullTextIndex ). They have only one FullTextIndex file after 7.1 and onwards.
1 Like
Hi Oleh,
Here’s a detailed breakdown of the BundleProfileRelationServiceSynchronizer, its origin, and purpose:
What is BundleProfileRelationServiceSynchronizer?
BundleProfileRelationServiceSynchronizer is a background thread introduced in IdentityIQ 8.3 as part of a new system component called the Bundle Profile Relation Service, under the Role Management & Analysis feature.
It is responsible for maintaining relationships between Roles (Bundles), their Profiles, and associated entitlements (ManagedAttributes). This service continuously synchronizes internal relationship tables that are used in role mining, analytics, and reporting.
When Was It Introduced?
- Introduced in IIQ 8.3
- Enabled by default in IdentityIQ 8.3 and above, including your version (8.4p2)
- First invoked during upgrade via the Role-Entitlement Associations task, which runs automatically to initialize these mappings
What Does It Do?
The service supports and automates the following:
- Initial Mapping
- On upgrade, the Role-Entitlement Associations task scans all Roles and builds the initial relationships between:
- Bundle → Profile → Entitlements (ManagedAttributes)
- Ongoing Synchronization
- After the upgrade, the
BundleProfileRelationServiceSynchronizerthread runs continuously to:- Listen for role/profile change events
- Incrementally update the relationship tables as bundles are created or modified
- Supports Role Analysis Features
- Powers analytics such as:
- “Which entitlements does this role include?”
- “Which roles grant this entitlement?”
- Enables faster querying and reporting for administrators and business users
Why Are You Seeing Log Messages?
You’re likely seeing INFO or DEBUG-level logs like:
INFO BundleProfileRelationServiceSynchronizer – Processing X role events
These are expected and do not indicate an error. They simply reflect that the synchronizer is processing role updates in the background.
You would only need to investigate if you saw:
ERRORentries (e.g.,Context already created for this thread!)- Stack traces or performance degradation
Optional Management
While typically no action is needed:
- You can manually run the Role-Entitlement Associations task if needed (via UI or console)
- The service can be disabled per server via:
Go to Administrator Console->Environment, select the gear to the right of a server, on the Services tab, toggle “BundleProfileRelation” service off.
This is not recommended unless there’s a known issue or support request (e.g., ETN IIQSR-802), as disabling it may impact role reporting accuracy.
4 Likes
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.