Role Extension functionality is not working as expected

[ssingh16]

Hi Team,

Suppose we requested an account for a user for an SAP endpoint, and the end date for one role is August 24. We changed the end date to August 25th by utilizing role extension functionalities. The end date is updated on the SAP side as well. However, we observed that remove access tasks were generated or triggered for the initial request time mentioned for the end date (August 24th). Ideally, if the end date is updated, the remove access task should trigger on August 25 instead of August 24, if the end date is changed.

One more query: If the end date is mentioned for any role in the request, then remove the access task trigger at that time of request processing, or when the end date is reached, then remove the access task trigger?

PFA document.

Regards,

Satyam

[rushikeshvartak]

Once end date has been reached task will be created from Enterprise role management job. 
what is end date visible under - Role - users tab

[ssingh16]

Thanks, Rushikesh, for the information!

When we change the end date of a role for a user by using extension functionality, removing account tasks should not trigger for the end date that was mentioned in the earlier request. But in our case, in Saviynt, the end date is not updated, but on SAP's side, the end date is updated. For more details, I have attached one document for reference. Please look into that.