Undo Deprovisioning action fails on a user that was deprovisioned more than 30 days ago (4373341)

When attempting to perform an undo deprovisioning of a user who was deprovisioned more than 30 days ago when the retention policy is set to only 30 days will fail with the following error:

"Administration Policy returned an error. The account cannot be restored because information on the deprovisioning of the account is missing from the data store."

WORKAROUND

Adjust the Change Tracking Log Configuration retention from 30 days to match the desired retention for the Undo Deprovisioning data to be restored.

In the Active Roles Console:

1. Navigate to Configuration/Server Configuration.
2. Open Change Tracking Log Configuration.
3. Change 'All requests that occurred during the last X days' to the required number of days.
4. Open the Active Roles Configuration Center | Administration Service | Select the Import Management History button.
5. Specify the date range of X set above in step 3. Complete the import to bring back the previous data.
6. Close the Active Roles Console, and it may be required to restart the Active Roles Service for the Undo Deprovisioning option to be displayed on the user object.

A comprehensive knowledge base article on this topic can be found here:

HOW TO: Increase the Active Roles Change History retention period (4226054)
https://support.oneidentity.com/active-roles/kb/4226054/how-to-increase-the-active-roles-change-history-retention-period


STATUS

Starting in Active Roles 8.2, this logic has been reverted and Active Roles will, once again, retain Deprovision and UndoDeprovision information indefinitely.