Getting error: deleting Objects with XOrigin greater then 0 is not permitted

I am getting the error while deleting the inactive users from the HelperHeadPerson table.  The error is deleting Objects with XOrigin greater then 0 is not permitted. Please advise how to handle.

Regards

  • Former Member
    0 Former Member over 3 years ago

    Hi,

    Xorigin> 0 means the entitlement was either inherited or assigned by a dynamic role or other assingment , and not directly (Xorigin=0). My advice would be, first of all, avoid deleting records direclty from the table. Please review those records with Xorigin>0 and try to find out the reasons of that setting:

    1. Using Object Browser, review the HelperHeadPerson table. You have "pairs" of UID_Org and UID_Person as foreign keys.
    2. Right click the UID_Org column and click on "Go to referenced object". When Xorigin>0 that could be either a business role, assignment or an Application Role. 
    3. Go to Manager, find that business or application role or whatever object it is, and see how it relates with the person. If it is by a dynamic role, see the definition and adjust the condition to remove that person. If it is an assigment in itshop, try to cancel it. This way, you wont need to delete records directly from the table: They'll remove themselves automatically.

    More on Xorigin (8.1.3) https://support.oneidentity.com/es-es/technical-documents/identity-manager/8.1.3/identity-management-base-module-administration-guide/4#TOPIC-1482682

    Hth!