IDM stops provisioning business roles, but privileges seems OK

[Chenyang]

Hi IDM expert,

We are having this problem since last Friday. Before that everything works fine. The problem is like for instance,

A business role TEST:PROVISION has two privileges

PRIV:ABCCLNT100:ONLY

PRIV:ROLE:ABCCLNT100:ROLE1

If TEST:PROVISION is assigned, nothing happens and none gets provisioned.

If both PRIV:ABCCLNT100:ONLY and PRIV:ROLE:ABCCLNT100:ROLE1 are assigned, PRIV:ABCCLNT100:ONLY get provisioned, but not for PRIV:ROLE:ABCCLNT100:ROLE1.

If PRIV:ABCCLNT100:ONLY is assigned and saved and then PRIV:ROLE:ABCCLNT100:ROLE1 is assigned, both privileges get provisioned.

Please kindly suggest what the problem could be?

Best Regards

Chenyang Xiong

[laurent_vandenbemden · Accepted solution]

Hi,

For the business role issue, have you checked the "Always Reconcile" and "Reconcile is pending" settings options in the BU role?

Rgds,

Laurent

[Chenyang · Accepted solution]

Hi Laurent,

I have solved the issue with the support of SAP.

It is a known bug in SP8 patch0 and it was fixed in SP8 patch2.

The note for this bug,

1912417 - Role assignment no longer triggers provisioning

Thanks,

Chenyang