For the mainframe module, D1IM does not generate correct add and remove jobs when merging is activated for membership relations (215274)

For the mainframe module, D1IM does not generate correct add and remove jobs when merging is activated for membership relations

From 7.0.1, D1IM offers a merging option for membership relations in target system so the projector does not overwrite changes in the target system. This KB describes the behaviour: https://support.quest.com/identity-manager/kb/205237 . But in 7.0.1, 7.0.2 and 7.1 the option has no effect on the mainframe connectors RACF, TOPSecret, ACF2 and AS400. The object layer generates a normal update event on the group rather than an add/remove event on the membership.

The namespaces RACF, TOPSecret, ACF2 and AS400 are not referenced in table DPRMembershipAction.

WORKAROUND

A workaround via SQL is available through a support service request.  The workaround is migration safe.

STATUS

Development has acknowledged bug #26872. We will add further information to the KB as soon as a fix is available.

26872