Deprovision Role

[shibinvpkvr]

Hi,

We need to remove all roles (both birthright and requested) from a user on termination. We have used Deprovision Role action in user update rule but is not working as expected. We are in 23.5 version and would like to know any better way to handle this from user update rule. (I know that we can do the removal from Actionable Analytics but would like to know if there is a better way to do this from user update rule itself. 

[smitg]

Hi @shibinvpkvr 

when you say "Deprovision Role action in user update rule but is not working as expected" what issue you are observing? Can you elaborate more on it.

Also, it will be helpful if you can paste the rule condition and actions here.

Thanks,
Smitha

[Manu269]

Is the task getting created?

Is there any issue in Provisioning job?

Logs please

[shibinvpkvr · Accepted solution]

Looks like I did not add "All" in the rule. Once I added that it removed all roles from user. I did not know that it is mandatory so went ahead and kept it empty. But I think it was always trying to remove only one role in that scenario. Issue resolved now. Thanks all