2

I have created a role and access policy (has app instance) assigned to the role. when i create a user , role is assigned but no resource added to user account.

I ran catalogue as well evaluate user policy schedulers.Resource not updated in user account

Same worked in OIM11gR2Ps3 but not in 12c.

Kindly help.

Sairu
  • 31
  • 2
  • did you check if there was any error in the logs while running EvaluateUserPolicies ? Also make sure the flag policy_eval_needed=1 is set in DB table user_provisioning_attrs, while policy_eval_in_progress=0 – Philipp Grigoryev Oct 07 '17 at 00:25
  • @PhilippGrigoryev I cudnt find any errors in logs. And I have made chandes in DB as well . Still user is not provisioined . – Sairu Oct 09 '17 at 05:34
  • do you check both -diagnostic and .out log files? Usually in .out you should be able to find the traces for User Evaluate Policies task running to double check for any errors or exceptions – Philipp Grigoryev Oct 10 '17 at 03:39
  • How many resources are there in the access policy?Do check for any deadlock scenarios between the resources in different access policy. – ps2090 Oct 23 '17 at 10:22
  • @PriyaSharma i have only one resource assigned to access policy. – Sairu Oct 25 '17 at 07:19
  • Can you check if there is an account in the OIU associated with the user for the resource and that the app instance key is assigned? – Berkley Lamb Oct 26 '17 at 20:26
  • @BerkleyLamb I could see the user in usr table nut not in OIU table. – Sairu Nov 09 '17 at 11:54
  • 1
    @Sairu Is the user disabled or not active by chance? (Maybe has a future start date) – Berkley Lamb Nov 09 '17 at 13:56
  • Is it happening for single user or multiple users? Is it specific to application instance? – Chaitanya K Aug 14 '19 at 13:53

0 Answers0