Dynamic Business Role - UNSAccountBInUNSGroupB

Hi there folks - happy Friday!

I have a quick question - I have a dynamic business role (working fine) with a UNSGroupB assigned to the role. When a person is put into PersonInOrg, they inherit the role and the UNSGroupB as an indirect assignment. When the person is removed from the role, they are still retaining the the UNSGroupB as a direct assignment.

Actually, 2 questions:

Is this expected behavior?
How do I change this so that the UNSGroupB is removed?

Thanks!

Top Replies

Barry Jackson over 2 years ago +1 verified

Hi Paul,

Your scenario tells me that the UNSGroupB was already assigned to the identity (presumably via UNSAccountBInUNSGroupB). And then it gets indirectly assigned via the business role.

To solve this…
Markus Weiss-Ehlers over 2 years ago in reply to Barry Jackson +1
Barry Jackson has beaten me on that one.

My answers would have been simpler:
1. Yes
2. Remove the direct assignment
paul love over 2 years ago in reply to Barry Jackson +1

Thanks Barry - I think it's the other way around, but that does look to be the answer - I am assigning the group via the business role and then my import from the custom target system is adding a direct…

Endpoint Privilege Management

Dynamic Business Role - UNSAccountBInUNSGroupB

Top Replies