Active Roles Community

Forum ARSS Deprovision keeps picking same objects

State Verified Answer
+1 person also asked this people also asked this
Replies 2 replies
Answers 1 answer
Subscribers 62 subscribers
Views 664 views
Users 0 members are here

Options

Related

ARSS Deprovision keeps picking same objects

Alex P (Quest) over 1 year ago

Only have ARSS setup - no ARS

Connection has condition User=MemberOf Scoping group

Matching on ObjectGUID=AdminDisplayName but let's consider match on samAccountName for simplicity

Accounts provisioned ok

Now I'm removing it from the scoping group

Deprovisioning job is set move to certain OU and disable

All works well except deprovisionign job keeps running against the same objects that it deprovisioned before, strange

What can this be?

Top Replies

+1 Alex P (Quest) over 1 year ago

Hmm... I think I figured it out. One of the deprovisioning rules that I had was appending "Deprovisioned on $Date" to one of AD attributes. So it kept considering objects for processing and appending again and again. As soon as I removed this rule it stopped finding any objects for this deprovisioning job. Now I get the logic, it will keep "correcting" object's state anytime it finds anything different (like object is enabled) and that appending rule was confusing it all up.
Cancel
Up +1 Down

Reply

Reject Answer

Cancel
0 JohnnyQuest over 1 year ago in reply to Alex P (Quest)

Yes, because it's basically just an attribute sync.
Cancel
Up +1 Down

Reply

Verify Answer

Reject Answer

Cancel