Attempting to use the Active Roles Configuration Transfer Wizard failed with the error:
There are one or more orphaned Access Template or Policy linkages in the Active Roles Configuration.
Enhancement ID#: 286092 has been created to change existing functionality and allow the Active Roles Configuration Transfer Wizard to handle these orphaned linkages more gracefully.
WORKAROUND
To report on orphaned Policy linkages, run the following cmdlet in the Active Roles Management Shell:
Get-QADObject -Type edsPolicyObjectLink -SearchRoot 'CN=AP Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsvaAPODN -eq $NULL} | select distinguishedName
To remove any found objects, run the following cmdlet:
Get-QADObject -Type edsPolicyObjectLink -SearchRoot 'CN=AP Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsvaAPODN -eq $NULL} | Remove-QADObject
To report on orphaned Access Template linkages, run the following cmdlet in the Active Roles Management Shell:
Get-QADObject -Type edsACE -SearchRoot 'CN=AT Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsaTrusteeSID -eq $NULL} | select distinguishedName
To remove any found objects, run the following cmdlet:
Get-QADObject -Type edsACE -SearchRoot 'CN=AT Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsaTrusteeSID -eq $NULL} | Remove-QADObject
STATUS
An Enhancement Request has been created to change existing Active Roles functionality.
Product Management will evaluate the request and this feature may become available in a future release of the product.
There are no guarantees that this specific enhancement request will be implemented in a future release. For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center