Users experience a delay with JIT access requests when Primary node is offline (4384027)

Users experience a delay with JIT access requests to become available in the following scenario:

- Accounts are configured with the Just in Time (JIT) feature to be elevated or demoted into privileged groups.
- Password Profile is configured to restore account on check-out & suspend account after check-in.
- SPP cluster where the Primary node is offline or unreachable and as a result the Replica is in ReplicawithQuorum state.

If the primary node of an SPP cluster is not reachable and there is a set of nodes with state ReplicyWithQuorum, access request are delayed because upon request, there are several tries to reach the primary before the JIT task is handed to one of the available replica nodes.

STATUS:

Enhancement Request # 703225 - to remove attempts to contact the primary for tasks when available nodes are in ReplicawithQuorum state - was submitted for consideration subject to successful QA and Product management approval.

Note: An SPP cluster without a running Primary node should be a rare scenario and it is recommended to take the necessary actions to restore a healthy cluster.