Identity Management (OIM): Running the 'Disable/Delete User After End Date' Scheduled Job Removes Roles from Disabled Users (Doc ID 2863281.1)

Last updated on SEPTEMBER 21, 2023

Applies to:

Symptoms

After end-dating an employee, run the 'Disable/Delete User After End Date' scheduled task.  This job determines if the user should be disabled or ultimately deleted based on the amount of time that has transpired since their end-date occurred.  An unexpected side effect of this process was recently discovered.  If an end-dated user is to be disabled, OIM was also revoking roles from the disabled user.  If or when the user was re-activated, the roles are gone and would have to be re-provisioned again.   

Changes

None 

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.