WorkFlow Remove Access via Manage Access Issue in IdentityNow

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi Team,

Did any one experienced issue with Workflow triggers for attribute change?

We have configured a workflow to trigger on cloudLifeCycleState change and remove access based on lifecyclestate change from active to inactive.

Removal of access (manage access) is not working if the workflow gets triggered through auto change of cloudLifeCycleState value (which is through aggregation and script)

Removal of access (manage access) works as expected If we change the cloudLifeCycleState manually through UI

Errors encountered as below:

a. {“error”:“actionStep(Manage Access) Err: task failed: activity error (type: sp:access:manage, scheduledEventID: 17, startedEventID: 18, identity: 1@c43ff567d32d@): request failed: 400 - 400 Bad Request: Required field "requestedItems" was missing or empty. (type: HTTP Response Returned a Client Error, retryable: false): request failed: 400 - 400 Bad Request (type: HTTP Response Returned a Client Error, retryable: false): request failed: 400 - 400 Bad Request: Required field "requestedItems" was missing or empty. (type: HTTP Response Returned a Client Error, retryable: false): request failed: 400 - 400 Bad Request”}

b. {“error”:“actionStep(Get Access) Err: task failed: activity error (type: sp:access:get, scheduledEventID: 11, startedEventID: 12, identity: ): activity timeout (type: ScheduleToClose)”}

Can you please guide us on this?

Thanks,
Sindhu

2

Can you please post a screenshot of your overall workflow, along with the configuration for “Get Access” and “Manage Access” steps?