Accesspolicy is Not Evaluated on Start date
(Doc ID 1588488.1)
Last updated on SEPTEMBER 20, 2019
Applies to:Identity Manager - Version 220.127.116.11.0 and later
Information in this document applies to any platform.
When a user is enabled on the start date, the Accesspolicy is not evaluated for the user.
Reproduction Steps for this Issue:
1. Create an Access Policy that assigns a resource.
2. Create a Role and associate Access Policy to the role.
3. Add membership rule to the role.
4. Create a user using 'Create User' request template with a future start date.
Expected Result: The user is created in disabled state. On activation date user is activated, role is assigned to the user and the resource is provisioned.
Actual Result: The user is created in disabled state. On activation date user is activated, role is assigned to the user and the resource is not provisioned.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document