RAR: Best strategy for users/roles/profiles synchronization

[Former Member]

Hi all,

Assuming that:

1) we will be never interested about profiles risk analysis (just users and roles)

2) roles risk analysis will be run first and after sometime (threee weeks) we will run it for users.

and we will run batch risks analysis:

Question 1) Is it possible to synchronize just roles and do it for users just when we want to execute risk analysis for them? Or is a best practice to synchronize always for users/roles and profiles eventhough risk analysis will not be done for all three?

Question 2) If we execute just full sync and full risk analysis, users/roles or profiles deleted in backend between executions are also deleted from DB? or removal takes place only when executing incremental sync?

Many thanks in advance. Best regards,

Imanol

[martin_trachsel · Accepted solution]

Hi Imanol,

Answer Q1: Yes, you can just select user and roles for the snych and risk analysis. Go to configuration-background jobs - shedule job. If you don't run risk analysis for profiles, you shouldn't sync and select them.

Answer Q2: Both, the Full risk analysis will alwaly update your DB. I will recommend you, to do this job in some periodic times. The incremental sync job will as well update your DB, if anything changed in the backend system. Normally your are going to run your daily or weekly jobs with this selection.

Thanks,

Martin