My Oracle Support Banner

Bulk Loaded Role Membership are Treated as Direct Provisioning and are not Revoked via Rule Based Assignment (Doc ID 2535079.1)

Last updated on JULY 21, 2020

Applies to:

Identity Manager - Version 11.1.2.3.190103 and later
Information in this document applies to any platform.

Symptoms

Customer performs the following steps in their OIM environment:
 
Bulkloaded User profile.
Bulkloaded Role-Membership.
Bulkloaded Target accounts.
Performed Access policy harvesting.
 
When the Access Policy Harvesting is run, appropriate bulkloaded roles are assigned to bulkloaded users.  
Later on, when an attribute change cause a bulkloaded user be assigned a new role, the previous role is should be revoked.
- The Revoke is not happening.

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.