<div dir="ltr"><div>Hey Chris, how are you assigning the Role to users? I made a parent role that induced a child role (which induced a resource account), but don't see any unexpected behavior. Assigning the parent induced the child role & resource, unassigning removed them.</div><div>Maybe throw the role XMLs in a hastebin link and send those? If you auto-assign roles there could be an issue there too.<br></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Sat, Jan 4, 2025 at 7:42 AM Chris Vermilya via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg4003226861613743238">
<div lang="EN-US" style="overflow-wrap: break-word;">
<div class="m_45785522707470951WordSection1">
<p class="MsoNormal">Hi All-<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Still looking for help with this is anyone had an idea. Been pulling my hair out trying to find what configuration I have set incorrectly. Any help would be greatly appreciated!<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">When assigned, the role hierarchy is seen on the All Accesses tab, and when the parent role is removed, the child role remains in place and no longer shows as part of a hierarchy. It shows as a direct assignment.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><img width="575" height="117" style="width: 5.9895in; height: 1.2187in;" id="m_45785522707470951_x0000_i1026" src="cid:ii_1943c87cb0a4cff311"><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><img width="442" height="60" style="width: 4.6041in; height: 0.625in;" id="m_45785522707470951Picture_x0020_1" src="cid:ii_1943c87cb0b5b16b22"><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
<p class="MsoNormal">Chris<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div id="m_45785522707470951mail-editor-reference-message-container">
<div>
<div>
<div style="border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181,196,223) currentcolor currentcolor;padding:3pt 0in 0in">
<p class="MsoNormal" style="margin-bottom:12pt"><b><span style="font-size:12pt;font-family:"Aptos",sans-serif;color:black">From:
</span></b><span style="font-size:12pt;font-family:"Aptos",sans-serif;color:black">Chris Vermilya <chris@Loomsecurity.io><br>
<b>Date: </b>Wednesday, January 1, 2025 at 15:52<br>
<b>To: </b><a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a> <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
<b>Subject: </b>Inducements Not Removed When Role Unassigned<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal">Hi List-<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">I’m having an issue where role inducements are no being removed when the role is unassigned. The role is successfully unassigned, but the inducements on that role remain in place. I can manually remove those child
<span style="color:black;background:white">inducements</span> (and they properly remove the entitlement from the resource account), but it is not happening when the parent role is removed. There are no errors in the log, it just isn’t firing. What am I missing?<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">To add, I am using MidPoint to assign the role and the inducements are properly assigned during construction.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Thanks!<span style="font-family:"Aptos",sans-serif"> </span>
<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</div></blockquote></div><div><br clear="all"></div><br><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div style="font-family:sans-serif;font-size:12px;line-height:1.5em"><span style="font-weight:bold">Drew Roberts</span> | <span style="font-weight:bold">System Administrator II</span><br>IT Platform Engineering, Azusa Pacific University<br><a href="http://apu.edu" target="_blank">apu.edu</a><br><br><img style="width: 210px;" src="https://www.apu.edu/static/src/sites/strategic-communication-engagement/images/apu_logo_2024.png" alt="APU logo"></div></div></div>