Objects created in native Active Directory tools may have the checkbox enabled for "Protect object from accidental deletion". This box is unchecked in Active Roles.
This is expected and is by current design.
When enabling the option Protect from Accidental Deletion using native Active Directory tools, the ACE (Access Control Entry) is set to Deny Delete.
When enabling the option Protect from Accidental Deletion using Active Roles, an Access Template is linked to the object which then syncs the permissions to the native object's ACE. Active Roles currently does not support reading the reverse, meaning if the setting is enabled outside of Active Roles, the setting will not be reflected in Active Roles.
For further information, see the topic About the Protect container from accidental deletion option section.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center