When setting a new provisioning role and removing an old provisioning role using Policy Xpress (PX), the new role fails to sync with the Global User and when the old role is removed all accounts are deleted from Global user.
This is a problem with the Offline Endpoint functionality.
Identity Manager 14.2 CP2
The workaround to this issue is to ensure that the Offline Endpoint Configuration values below are unchecked.
In the Identity Manager User Console, "Tasks - > Endpoints - > Manage Offline Endpoint Configuration", if the "Endpoint Request Retry" and "Enable Reminder" options are ticked the values do not sync correctly.
There are plans to improve\ enhance the Offline Endpoint functionality in later releases of CA Identity Manager