Slow / delay trigger after Role modification IDM 8.0 SP5

[former_member243324]

Hi All,

After I updated the Role (Add Privilege to Role), it takes over 15 min to 30 min trigger the changes, There is no issue if updated the Person (Assign the Business role), it triggers the process immediately.

Any idea? Thank you.

[devaprakash_b]

Hi Shunji,

As per my understanding, if you assign an IDM role to the user freshly, then provisioning tasks related to the connectors maintained for the privileges(at repository level) are triggering immediately. But when you try to make a modification to the exiting IDM role (like adding/removing privilege) which is already assigned to the user, then it is taking time to trigger the provisioning tasks related to the connectors.

If this is the case, once you modify the role, please check whether any dirty entries are created. The below query should list down all the dirty entries available. Also check the schedule rule of the stored procedure related to dirty entries under the housekeeping activities.

(select * from idmv_link_ext2 where mcdirty = 1)

Regards,

Deva Prakash

[former_member243324]

Your "understanding" is corrent~ 🙂

I ran the "Select * from idmv_link_ext2 where mcdirty = 1" and the result is empty.

[devaprakash_b]

Have couple of questions?

Did you ran the query immediately after adding/removing privileges from role?

Did you check the scheduled time for stored procedure under housekeeping tab?

Regards,

Deva

[former_member243324]

What query do I need to run?

yes, i did.Most of the stored procedure set as hourly or daily.

[devaprakash_b]

Please check the below stored procedure schedule time under house keeping activities, it would usually be scheduled to run every minute

Reconcile dirty entriesReconciles entries with the "dirty" flag set.

[Ckumar]

Hello Shunji,

Could you please check if any event task is set on MXREF_MXPRIVILEGE or MX_MEMBER_MX_PRIVILEGE and verify that these event task has any delay set.

Regards,

C Kumar

[former_member243324]

Hi Kumar,

There is no delay set for these event tasks.

The role only contains 1 user, around 10 Privileges, I have waited an hour for triggering the process.

Thank you.

[Ckumar]

Hello Shunji,

Could you please check if any event task is set on MXREF_MXPRIVILEGE or MX_MEMBER_MX_PRIVILEGE and verify that these event task has any delay set.

Regards,

C Kumar