Employees found not being assigned to a Dynamic Business role, even though the Employees meet the dynamic condition and are not assigned any business roles that will conflict with the Dynamic Business role.
In addition the following warning message is logged in the DialogJournal:
"there are already employee assignments to roles that exclude the roles to be added."
There are other Employees already assigned to conflicting business role(s) with the dynamic condition and at the same time they are filtered out by the dynamic condition.
The dynamic role check only considers the condition which is defined for the dynamic role. However, if a new membership violates a conflicting role, the dynamic role check will fail and complete, but the task will repeat the attempt at a later time. The warning message, as mentioned in Description, will be logged in the DialogJournal.
Since the dynamic role check will fail and complete when such a conflict occurs, if there are other Employees which have to be assigned to the business role dynamically, but DON'T violate the conflicting roles, these other Employees will also not be assigned.
WORKAROUND
Resolve the conflicting memberships in the business roles.
STATUS
A fix has been implemented and will be included in a future release of the product. If you require this immediately corrected, please contact Support for a hotfix referencing the defect ID 33720.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Términos de uso Privacidad Cookie Preference Center