Return
-
Title
Attempt to Undo Deprovision errors out stating it cannot find the data in the data store -
Description
Look for a user that was Deprovisioned longer than 30 days ago (or what your Change History retention is set for - i.e. 60 days, 90 days). Attempt to Undo Deprovision and the following error is displayed:
ERROR:
Administrative Policy returned an error: The account cannot be restored because information on the deprovisioning of the account is missing from the data store. Possible reason: An error occurred when the user account was deprovisioned. -
Cause
Expected functionality.
Enhancement Request ID#: 399889 was introduced in Active Roles 8.0.1 that changes the retention period for Deprovision data to match the Change History retention period. Traditionally the Deprovision data would be retained forever, which can lead to database bloat. Now the Deprovision data is cleaned up to match the Change History cleanup, which is 30 days out-of-the-box. -
Resolution
WORKAROUND
Increase the Change History retention policy to the required number of days an Undo-Deprovision is required. Please see this article here: Users Deprovisioned in ActiveRoles before an upgrade cannot be Undo-Deprovisioned after upgrade (4248719)
STATUS
Enhancement Request 416014 has been submitted to allow for a separate retention for Deprovision data aside from Change History. -
Change Request
416014