07/27/2023 08:57 PM
Hi Team,
Accounts are getting deleted in SAP even though we have configured ENDDATE under "TERMINATED_USER_ROLE_ACTION" in SAP connection
This seems to be product defect. Can someone confirm on same.
https://saviynt.freshdesk.com/support/tickets/1652260
Solved! Go to Solution.
07/31/2023 10:51 AM
TERMINATED_USER_ROLE_ACTION is meant for putting an enddate to the SAP roles the user is assigned to on termination of the SAP User account.
The user account will ONLY be deleted if you have "DELETEACCOUNT" as an action in the the attribute TERMINATED_USER_ROLE_ACTION
However, a remove account task will get generated per your Freshdesk ticket if you have user update rules / technical rules (birthright) that have an action to create a remove account task on termination or when the birthright condition fails.
07/31/2023 09:46 PM
As mentioned above we have configuration as ENDDATE.
How to avoid creating remove account task. Is is documented somewhere that it will perform delete account. we don't have configuration to remove if fails. This are user update rule
08/01/2023 07:34 AM
In the user update rules that match your criteria, you should have "Deprovision Access" instead of "Deprovision Accounts"
08/10/2023 11:02 AM
In case of CUA Enabled account will be deleted in target if user update rule configuration is Deprovision Accounts / Deprovision Access and Accounts
solution - Keep Disable user accounts in user update rule