Hi,
I created a custom Attestation policy from the copy of the System entitlement memberships attestation. I triggered the Attestation policy on an employee.
I selected Deny as the decision. However, It's not removing the groups from employees.
UNSAccountInUNSGroup table is defined in the attestation procedure.
I have checked through the Configuration parameters - QER\Attestation\AutoRemovalScope\UNSGroupInUNSGroup\RemoveDirect is enabled.
May I know where else I need to check, in order for the membership to be removed from the employee after they deny the attestation?
Thanks