create remove access task for all entitlements when there is remove account/disable account task

[sudheera]

Hi,

We need to remove all entitlements in the account whenever there is a removeaccount task /disable account task is created for REST application, as all the ent are not getting removed from accounts from app end when there is remove/disable account.

as of now we are following these procedures

1)for leaver, we are creating user update rule to perform the deprovision access

2)from ARS if end user request for remove/disable account request we are creating analytics report and from that it is creating deprovision access for all entitlements.

Do we have any other approach to get remove all entitlements from accounts whenever there is remove/disable account task is created for the accounts?

[NM]

@sudheera you can set a configuration on endpoint 

"Create dependent remove access task"

So when a remove account task gets created it will automatically create remove access task.

[sudheera]

HI,

I have updated the config changes, but it is not creating remove access tasks automatically.

Do i need to change any other settings?

[NM]

@sudheera did you try to raise a remove account request? 

Is it approved?

Does the user have access assigned?

[sudheera]

Yes, remove account request is created. we are using automatic approval for remove.

user have 3 entitlements.

[NM]

@sudheera by any chance are the  task in pending state for the access?  

And I hope you are trying to remove account for the endpoint for which access are present.

Share task screenshot as well.

[sudheera]

by any chance are the  task in pending state for the access?  -No

[ @sudheera - We have edited this message to mask sensitive information from an attached image. Please refer private message we have sent you on same]

[NM]

@sudheera can you share the remove account task too which was created via request.

[sudheera]

HI,

[NM]

@sudheera is it a disconnected application?

And what is the request option set for entitlement type?

[sudheera]

Request option is Table.

It is Oracle EBS DB connector application

[NM]

@sudheera we have the same configuration in 24.5 and it works fine for us.

[sudheera]

I tried the above solution for REST connector in 24.4 version. It is working fine.

Are there any limitations with DB connector?

[rushikeshvartak]

• Can you try with new request or user. it works well irrespective of version

[sudheera]

Hi,

Yes, it is working irrespective of version.

It is working for REST connector application, but it is not working DB connecter application.

Are there any limitations on connector type?

[rushikeshvartak]

There is no limitation its working in 24.9 also

[rushikeshvartak]

There are 2 configs 

• Endpoint Level  - Create Dependent Entitlement Task for Remove Access
  
• Entitlement Type Level - Create task Action
• 

[sudheera]

HI,

i have changed the configurations, but it is not creating remove access tasks. do i need to change any other configs?

[ShantanuKumar]

Team, Could you please help us with why it is not working even after setting the correct configuration? Or do you need us to open a ticket?

[rushikeshvartak]

Please open support ticket