New instance of discontinued,complete task is getting created

[Sakshi2806]

Hi All,

We have a scenario, where we are trying to discontinue few Remove access task of AD for a particular time frame. (Due to some issue , we removed remove access json. Now that issue is fixed we want to discontinue task within that timeframe ).

However , a new tasks instance of the same task is getting created every time we taek any action.

We already checked the access end date of the above user accout_entitlement and its updated to Oct -22 -2024

Any suggestion , what else we can check and stop the duplicate instances getting created for these requests

Thanks

Sakshi

[rushikeshvartak]

It seems task have start date and end date. Remove start & end date from request_access table

[Sakshi2806]

I am trying to update it but Query execution job gives me below error since its require some date time value -

[rushikeshvartak]

Please share query

[Sakshi2806]

I tried below three the first two failed with error I provided earlier. The third one caused some other issue and request was not even visible on request history page

select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,null AS REQUEST_ACCESS__ENDDATE ,null AS REQUEST_ACCESS__STARTDATE from request_access where REQUESTKEY in ('44119','44122')

select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,'' AS REQUEST_ACCESS__ENDDATE ,'' AS REQUEST_ACCESS__STARTDATE from request_access where REQUESTKEY in ('44119','44122')

select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,'0000-00-00 00:00:00' AS REQUEST_ACCESS__ENDDATE ,'0000-00-00 00:00:00' AS REQUEST_ACCESS__STARTDATE from request_access where REQUESTKEY in ('44119','44122')

[rushikeshvartak]

select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,'9999-12-31' AS REQUEST_ACCESS__ENDDATE from request_access where REQUEST_ACCESSKEY in ('44119','44122')

Before :

After :

Validation

[Sakshi2806]

Hi @rushikeshvartak , My assumption was only when we remove end date completely it will stop creating any new task, I tried to put in future date for 22 October-2024. However. in the next job run again it created a new instance of revoke tasks once the current task got errored out.

[rushikeshvartak]

Which job is creating task ? Wsretry / enterprise role management

[Manu269]

@Sakshi2806 you can refer below sample where we even discontinued few task based on username.

Can you try creating similar like this:

Select taskkey as arstasks__primarykey , 4 as arstasks__status, 'Discontinued as per migration' as ARSTASKS__PROVISIONINGCOMMENTS from arstasks where taskkey   in (select art.TASKKEY from arstasks art, users u where art.USERKEY = u.userkey and (u.username like '0030065%' or u.username like 'XXXX%' )  and art.STATUS =1)

[Sakshi2806]

Thanks Manish, we already tried to discontinue in bulk but in the very next run again new instance was created for the same request .

Check below-