[midPoint] [External] Re: Inducements Not Removed When Role Unassigned

[Drew Roberts]

Hey Chris, how are you assigning the Role to users? I made a parent role
that induced a child role (which induced a resource account), but don't see
any unexpected behavior. Assigning the parent induced the child role &
resource, unassigning removed them.
Maybe throw the role XMLs in a hastebin link and send those? If you
auto-assign roles there could be an issue there too.

On Sat, Jan 4, 2025 at 7:42 AM Chris Vermilya via midPoint <
midpoint at lists.evolveum.com> wrote:

> Hi All-
>
>
>
> Still looking for help with this is anyone had an idea. Been pulling my
> hair out trying to find what configuration I have set incorrectly. Any help
> would be greatly appreciated!
>
>
>
> When assigned, the role hierarchy is seen on the All Accesses tab, and
> when the parent role is removed, the child role remains in place and no
> longer shows as part of a hierarchy. It shows as a direct assignment.
>
>
>
>
>
>
>
> Thanks,
>
> Chris
>
>
>
>
>
> *From: *Chris Vermilya <chris at Loomsecurity.io>
> *Date: *Wednesday, January 1, 2025 at 15:52
> *To: *midpoint at lists.evolveum.com <midpoint at lists.evolveum.com>
> *Subject: *Inducements Not Removed When Role Unassigned
>
> Hi List-
>
>
>
> I’m having an issue where role inducements are no being removed when the
> role is unassigned. The role is successfully unassigned, but the
> inducements on that role remain in place. I can manually remove those child
> inducements (and they properly remove the entitlement from the resource
> account), but it is not happening when the parent role is removed. There
> are no errors in the log, it just isn’t firing. What am I missing?
>
>
>
> To add, I am using MidPoint to assign the role and the inducements are
> properly assigned during construction.
>
>
>
> Thanks!
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
>


-- 
Drew Roberts  |  System Administrator II
IT Platform Engineering, Azusa Pacific University
apu.edu

[image: APU logo]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250106/ae1a3433/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 18113 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250106/ae1a3433/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 8885 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20250106/ae1a3433/attachment-0003.png>