Hello,
I have integrated the UNS system using a custom REST API script on One Identity Manager v9.2.
-
User objects are added to the UNSAccountB table.
-
Group objects are added to the UNSGroupB table.
-
Role objects are added to the UNSGroupB1 table.
Additionally, I have created a new shelf under IT Shop and made all UNS system roles and groups available for request. The environment uses the default Identity Manager configuration.
When a group or role request is approved by the administrator, it is successfully added to the UNS system. However, when assigning a new role, I need to remove the previously assigned groups and roles.
I’m unable to delete these entries directly because the UNSAccountBHasUNSGroup and UNSAccountBHasUNSGroup1 tables contain IsInEffect and XOrigin values that prevent manual deletion via SQL.
When I attempt to change these values and delete the records manually, the corresponding groups and roles reappear after synchronization or system updates.
Request:
I would like to know the proper and supported method to remove UNSGroupB and UNSGroupB1 objects that were added to UNSAccountB via request — either:
-
manually through a recommended procedure, or
-
using Identity Manager process logic (if there is a built-in or recommended process for revocation).
Could you please advise on the correct approach or provide documentation for safely removing these UNS associations?
Environment Details:
-
One Identity Manager Version: 9.2
-
Integration Type: Custom REST API Script
-
Modules Used: UNSAccountB, UNSGroupB, UNSGroupB1, IT Shop