Dynamic Business Role - UNSAccountBInUNSGroupB

Hi Paul,

Your scenario tells me that the UNSGroupB was already assigned to the identity (presumably via UNSAccountBInUNSGroupB). And then it gets indirectly assigned via the business role.

To solve this we created a custom process to "remove direct if indirect" ..... in there you do a HandleObjectComponent - Delete for objects that have XOrigin > 1 AND XOrigin & 1 = 1.

If the assignment is direct and indirect performing a delete will delete the direct assignment only.

HTH, Barry.

Barry Jackson has beaten me on that one.

My answers would have been simpler:

1. Yes
2. Remove the direct assignment

Thanks Barry - I think it's the other way around, but that does look to be the answer - I am assigning the group via the business role and then my import from the custom target system is adding a direct assignment to it too.. XOrigin = 3... so I need to update my import script to not do that...

Thanks for the answer, that makes perfect sense now!