Some default Azure Access Templates for "Delete" have only "Delete Child" permissions on the Azure container (4381793)

Some of the included Active Roles object managed Access Templates which should grant Delete permissions only include Delete Child permissions on the Azure container object..

This results in delete delegations only functioning as expected if they are attached to the Azure containers. Delete permissions that are delegated via a Managed Unit are not functioning.

This issue is being tracked as Defect ID 647258.

WORKAROUND 1

Link delegations to the Azure class containers or the tenant.

WORKAROUND 2

Create a custom Access Template which includes the Delete permission directly on the desired Azure class.

STATUS

Waiting for fix in a future release of Active Roles.