It is possible that more than one Deprovisioning Policy might resolve an object when it is deprovisioned. This could be the result of several explicit linkages to Active Directory, or through a linkage to a Managed Unit.
This can be seen by enabling the Advanced Details pane under View | Advanced Details Pane, selecting an object, and noting how many Deprovisioning Policies resolve on that object on the Active Roles Policy tab. (NOTE: Deprovisioning Policies have a distinct red arrow in the top left corn of the icon).
In these scenarios, it is expected that the object will be deprovisioned under a blended policy, using the most restrictive settings found under all resolved Deprovisioning policies.
Although this functionality is expected, the results of a blended policy may not always be clear.
A best practice would be to consolidate Deprovisioning Policies and ensure that only one Deprovisioning Policy resolves on any given Active Directory object.
© ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책 Cookie Preference Center