Role delete stuck in "Pending Delete" state

  • 7013290
  • 13-Sep-2013
  • 25-Sep-2013

Environment

NetIQ Identity Manager Roles Based Provisioning Module 4.0.2

Situation

When deleting a role from Role Catalog, role status stays "Pending Delete" state.
Role and Resource Service Driver is running.
nrfStatus of the role gets properly changed to 15.
Role is not deleted in the vault.
RBPM was upgraded from an earlier version.

Resolution

Verify the following:
Role and Resource Service driver does not have nrfStatus attribute under nrfRole class in the filter.
Role and Resource Service package version is 1.0.1 or lower.

In Designer 4.0.2, remove Role and Resource Service driver, and add a new Role and Resource Service driver with the latest package version (2.0.0.x).
Save the driver and deploy.

Cause

In RBPM 4.0.2 we have optimized the process of deleting roles. A new attribute called nrfStatus has been added to the nrfRole object to manage the role status.
During the migration process Role and Resource Service driver has to be deleted and created again as outlined in Identity Manager 4.0.2: RBPM and Reporting Migration guide.