When an user is moved from one department to other, Provisioning Roles(Siebel entitlements)should be changed for the user.
When the user modification operation is performed, the Roles are successfully interchanged but the Account sync has some discrepancies.
1. Positions from Old Account Template of Siebel are not Removed
2. Organization from Old Account Template of Siebel are not Removed
3. Primary Responsibility,Position and Organization are not set as per the New Account Template (Provisioning Role).
The provisioning server ETA logs do not record any failures but they do show items as unchanged (example below)
20190820:163525:TID=1fbb70:Modify :E157:----:F:+d successfully: (accounts updated: 0, unchanged: 2, failures: 0)
Release : 14.x
Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)
This is a Weak Sync issue (see the product documentation for more information - link below).
"Weak Synchronization" (extract).
Weak synchronization ensures that users have the minimum capability attributes for their accounts. Weak synchronization is the default in most endpoint types. If you update a template that uses weak synchronization, CA IdentityMinder updates capability attributes.
Note: When propagating from a weak synchronization account template, changes that would remove or lower capabilities could leave some accounts unsynchronized. Remember that with weak synchronization, capabilities are never removed or lowered. Without consulting other templates for an account, the propagation does not consider if weak synchronization is sufficient.
With strong sync, the positions are getting removed as intended.