<div dir="ltr"><div dir="ltr">I have quite a few auto roles using like the below and during a sync there were partial_errors on certain accounts and so after checking why and fixing I noticed the roles were not removed (conditions are no longer true) when they normally are removed. The only thing that is different I guess is that these accounts had a partial_error result. Any ideas? If it is because of the partial_error, How can that be prevented and still process assignments? I also noticed that the email notifications did not go out either.<div><br></div><div><div><mapping></div><div>    <name>Assign Security Group</name></div><div>    <authoritative>true</authoritative></div><div>    <strength>strong</strength></div><div>    <source></div><div>        <path>extension/bshp:entitlement</path></div><div>    </source></div><div>    <expression></div><div>        <assignmentTargetSearch></div><div>        <targetType>c:RoleType</targetType></div><div>            <filter></div><div>                <equal></div><div>                    <path>c:identifier</path></div><div>                    <value>SEC-THE_GROUP</value></div><div>                </equal></div><div>             </filter></div><div>        </assignmentTargetSearch></div><div>    </expression></div><div>    <target></div><div>        <path>assignment</path></div><div>    </target></div><div>    <condition></div><div>        <script></div><div>      <span style="white-space:pre">               </span><code>entitlement == 'condition1' || entitlement == 'condition2'</code></div><div>        </script></div><div>    </condition></div><div></mapping></div></div></div></div>