Provisioning Role Deletion Failure: Contains Members Error - CA Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When attempting to delete a provisioning role within the Identity Manager console, the operation may fail with the following error messages:

• Task failed.
• You can not delete a provisioning role that contains members.
• Return to search and uncheck the roles shown below from the delete list.
• 'ROLE NAME' contains members and can not be deleted.

This occurs because the system prevents the deletion of roles that still have assigned members to maintain data consistency within the Provisioning Manager.

Environment

Identity Manager

14.x, 15.x

Resolution

To delete the provisioning role, you must first remove all associated members:

1. Log in to the Provisioning Manager.
2. Navigate to Roles.
3. Search for and select the specific role.
4. Right-click the role and select List Global Users.
5. Remove the role from all associated users.
6. Once the role shows zero members, proceed to delete the role again.