Too many MX_MODIFYTASKs/modifyABAPUser and modifyJavaUser tasks are perform

[Former Member]

Hi Experts

We have quite a disturbing problem When assigning roles to a user a huge number of modifyUser tasks on ABAP and Java systems are executed.

I have made sure that it is not due to missing attributes in the modifyUser script. We have configured our own script, that checks all relevant attributes. Furthermore the flag is never set to 1 = provision changes.

It seems that the MX_MODIFYTASK on the repositories can be started from other places than the modifyUser event task (MX_PERSON on modify).

Does anyone know anything about this?

It is impacting heavily on performance in our productive environment.

Kind regards

Heidi Kronvold

[Former Member]

Hi

I found the answer When creating the global constant MX_PRIV_MODIFY_POLICY and setting the value to 3 no unnessecary modify User provisionings takes place.

Kind regards

Heidi Kronvold

[Former Member]

I've setted up a dummy modifytask for the privileges that does nothing but echoes the username to job/system log and is disabled. Being disabled it does not end-up to provisioning queue neither.