Custom role attribute values persist after clicking "Cancel" in Modify Provisioning Role task

Products

• CA Identity Suite

Issue/Introduction

In the Identity Manager "Modify Provisioning Role" task, when a user modifies a custom role attribute and then navigates to another tab or attempts to cancel the task, the changes are unexpectedly persisted to the role even though the "Submit" button was not clicked.

Environment

Product: Identity Manager
Versions: 14.x, v15

Cause

The system behavior incorrectly allows the persistence of changes to custom role attributes during the task flow prior to submission. This has been addressed via a specific patch and a required configuration change.

Resolution

Obtain and Deploy the Patch:

Request and acquire the necessary patch file "idm_patch.tar.gz" by creating a support ticket
Extract the contents and place the files into the following directory on the server: /opt/brcm/iga/patches/idm

Configure the Application Property:

Log in to the Identity Manager Admin Console.
Navigate to: Home › Environments › [Environment Name] › Advanced Settings › Miscellaneous.
Locate the User Defined Properties section.
Find the property EnableProvisioningRoleDeepCopy and set its value to true.

Restart the Service:

Restart the Identity Manager application service (via the IGX dashboard or the command line) for the configuration changes to take effect.

Additional Information

Validation: Once the service has restarted, perform the "Modify Provisioning Role" task, modify a custom field, navigate to another tab (or perform the steps that previously triggered the issue), click "Cancel," and verify that the attribute values have not been saved.