Business role for active directory groups take a long time to add users

Hello,

Has anyone seen any issues with adding users to groups through a business role?

We have a few that we need to add users to upon creation. It seems to take a good while before the users get added to the group.

The business role is assigned but the user does not appear in the group until hours later. I do not see the ADSAccountInADSGroup but i do see DBQueue show Membership of Active Directory Groups in Active Directory Groups.

I realize the dynamic role check runs every hour out of the box. Has anyone changed it so a new role check schedule for the specific ones run every 15 mins or 30 mins?

Would this put a damper on the system if I did this? Right now the out of box Dynamic roles check has 40 assigned dynamic roles.

Any suggestions?

Thank you,

Lu

  • Hi,

    This is a hard one to answer without knowing the details of the environment itself, ie version, SQL Server version, how many records are in the database, etc.

    Also, what else is running when the dynamic role check is running?  For example, full sync?

    How is the database performance in general?  Could this be improved?

    Might be something worth testing if you have an environment to do so in.

    Trevor