Active Roles edsvadeprovisiondeletiondate

Question

We have a policy that will delete deprovisioned user 31 days after. Can I change the edsvaDeprovisionDeletionDate by setting it to tomorrow, and force and earlier deletion that way? I am just doing a test right now, as we want to be sure that the internal built-in deletion policy is going to remove the account based on that attribute. Did some research, looks like the policy will execute @ 3am.

Michiel · Accepted Answer

Hi, 
 There shouldn't be more to it than just a "DeprovisionDeleteDate" in the past - did you use the correct date format? The ARS service account indeed needs to have permissions to delete the object. 
 There should be events created (in the 'EDM Server' log) for each attempt to delete an account; for successful deletions, there are 3 (and for errors, just 2): 
 Successful: Event 2691: Operation request has been submitted to ActiveRoles Administration Service Event 1513: Object is deleted Event 2692: Operation has been successfully performed 
 Failed: Event 2691: Operation request has been submitted to ActiveRoles Administration Service Event 2693: ERROR: Operation failed 
 Hope this helps!

Active Roles edsvadeprovisiondeletiondate

Top Replies