...
| Value | ||
|---|---|---|---|
GUID |
| ||
Scheduled by default |
| ||
Interval in seconds | 30 | ||
Concurrent |
| ||
Parameters |
|
Work Items
Task does multiple things but…. how to write it well??There are 3 actions that are done by this task:
Assignment Deprovisioning https://itsense.atlassian.net/wiki/spaces/IKB/pages/edit-v2/2583199778#Assignment-Deprovisioning
Marking Assignment to deprovisioning https://itsense.atlassian.net/wiki/spaces/IKB/pages/edit-v2/2583199778#Mark-assignments-to-deprovisioning
Cleanup https://itsense.atlassian.net/wiki/spaces/IKB/pages/edit-v2/2583199778#Cleanup
All these action work to more or less extend on the collection of resource assignments that are suspected as ‘to-be-deprovisioned’. This collection is described below and named PrimaryAssignments.
Primary filter for resource assignments
...
Also if it does have MarkedForDeprovisioningDate but it’s time did not come - it will be removed from PrimaryAssignments collection.TODO: write about RemoveAssignmentsThatShouldBeKeptBecauseOfRoleAssignment
Remove Assignments That Should be Kept Because of Role Assignment
There can be situation described in
| Jira Legacy | ||||||
|---|---|---|---|---|---|---|
|
Searching for valid role assignments:
Servicedmcore_RoleAssignments | Condition |
|---|---|
Deny | is |
Ignore | is |
ValidFrom, ValidTo | NOW is between |
State |
|
Assignments reasons are gathered for these valid role assignments.
Resource assignments that have as a AssignmentReason the valid role assignments will be removed from PrimaryAssignments (and so not deprovisioned).
Check for Same Assignment
...
Resource assignments gathered in AssignmentsToMarkForDeprovisioning (https://itsense.atlassian.net/wiki/spaces/IKB/pages/edit-v2/2583199778#Support-for-Deprovisioning-delay ) will be checked again if MarkedForDeprovisioningDate is empty and will get MarkedForDeprovisioningDate set to NOW.
...
Cleanup runs for resource assignments gathered in ResourceAssignmentsToDelete (https://itsense.atlassian.net/wiki/spaces/IKB/pages/edit-v2/2583199778#Check-for-Same-Assignment ) and ones that are for unprovisioned Identity (filter below)
...