Return
-
Title
Approvals tab in Web Interface fails to load with the error "Exception has been thrown by the target of an invocation" -
Description
The Approvals tab in the Web Interface fails to load with the error:
Exception has been thrown by the target of an invocation
Attempting to view Approvals in the Active Roles Management Shell using the Get-QARSApprovalTask cmdlet fails with the error:
Administration Service encountered an error when retrieving properties of the object 'CN=Group,OU=Container,DC=domain,DC=local'.
Directory object not found. (Exception from HRESULT: 0x8007208D)
Note: The above error can be seen when trying to action an existing Approval that the User/Group no longer resides in its original location before the Approval was completed.
-
Cause
An unprocessed Approval has a group that is configured as an Approver, and the User/Group was moved within Active Directory or Active Roles before the Approval was actioned.
Defect ID#: 437535, has been submitted to change this behavior where it is tied to the Distinguished Name (DN) value when it should be a GUID/SID value.
This issue does not occur if a configured Approver is a User and that User was moved before the Approval was processed. -
Resolution
WORKAROUND 1
If possible, move the configured Approval User/Group back to the previous location.
WORKAROUND 2
Action the Approval workflow before moving the User/Group.
WORKAROUND 3
Contact One Identity Support. In most circumstances, it should be possible to update the pending approvals with the new group DN reference, which will resolve this issue. In some circumstances, it may be necessary to delete all pending approvals to resolve this issue.
STATUS
Defect ID#: 437535 has been resolved in Active Roles 8.2 -
Change Request
437535