ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Child roles removed but still linked to accounts


Article ID: 221906


Updated On:


CA Identity Suite CA Identity Manager


When removing a child role from a parent role, the accounts linked to the template of the child role are not removed



This is working as designed. 


To work around this, go to Identity Manager  UI:

1)  Use the "Check Role Synchronization" task, you can see that the user has an extra assignment from Acct Template

2) Use the "Synchronize User with Roles" task and select add missing and remove extra account option.