During membership provisioning, changes made in the target system are overwritten. (222732)

During the membership provisioning, changes made in the target system may be overwritten. This behavior can occur under the following conditions:

• Memberships are saved in the target system as an object property in list form. (Example: List of user accounts in the property Members of an Active Directory® Group)
• Memberships can be modified in either of the connected systems.
• A provisioning workflow and provisioning processes are set up.

If a membership in One Identity Manager changes, the complete list of members is transferred to the target system by default. Memberships, previously added to the target system are removed by this; previously deleted memberships are added again.

To prevent this, provisioning can be configured such that only the modified membership is provisioned in the target system. To do this, set the option Enable merging on the assignment table (DPRNameSpaceHasDialogTable.IsAdHocSingleMemberShip = TRUE). Additional processing steps are executed for tables with this option enabled.

For more information, see: https://support.quest.com/technical-documents/identity-manager/7.0.1/target-system-synchronization-reference-guide/basics-of-target-system-synchronization/synchronizing-and-provisioning-memberships/single-membership-provisioning