Unable to remove failed roles added via Dynamic Group

[devaprakash_b]

Hello experts,

We have created a dynamic group in IDM via which the role gets assigned to Identities automatically based on their company code.

So the identity would be assigned with both Dynamic Group and Role (MXREF_MX_DYNAMIC_GROUP,MXREF_MX_ROLE).

Now the roles have been failed for few users and few know the reason for it. We know need to remove the dynamic group and role so that we can add it again.

The issue is we are unable to remove the dynamic group from user but the failed role is not getting removed. Tried with {e} operator but no luck.

When checked in idmv_link_ext2 view, the mcAssignedDynamicGroup value is  for that failed role.

Please let me know how to remove the failed role added via dynamic group.

IDM version - 8.0

Regards,

DP

[Steffi_Warnecke · Accepted solution]

Hello Deva,

is the identity still part of the dynamic group?

Normally I just use the dynamic group recalculation for this, by excluding the mskey of the identity in the filter of the dynamic group, that recalculate the group (this way all child roles are taken away, too) and then return the filter back to normal and recalculate again, assigning the dyn group and roles to the identity.

Regards,

Steffi.

[devaprakash_b · Accepted solution]

Thanks steffi,

The role assigned via dynamic group has been removed from the identity after ignoring the user mskey and recaluclated the groups.

Regards,

DP

[Chenyang]

Hi DP,

Please try delete the business role from the user and then resolve the dynamic group, the role will come back.

Cheers

Chenyang

[devaprakash_b]

Hi chenyang

the role is not getting removed using {e} operator.

regards,

Deva