Bulk Loaded Role Membership are Treated as Direct Provisioning and are not Revoked via Rule Based Assignment
(Doc ID 2535079.1)
Last updated on JULY 21, 2020
Identity Manager - Version 18.104.22.168.190103 and later Information in this document applies to any platform.
Customer performs the following steps in their OIM environment:Bulkloaded User profile.Bulkloaded Role-Membership.Bulkloaded Target accounts.Performed Access policy harvesting.When the Access Policy Harvesting is run, appropriate bulkloaded roles are assigned to bulkloaded users.
Later on, when an attribute change cause a bulkloaded user be assigned a new role, the previous role is should be revoked.
- The Revoke is not happening.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!