This document will explain step-by-step process to delete below type of roles from AC 10.
- Business Roles
- Composite Roles
- Single Roles
- Deletion of Business Role:
When you try to delete the business role, you may get below error. It means that Business role is being used in some request which is still open.
To check all the requests for particular PFCG/Business Role, check GRACREQPROVITEM table.
This table will give you the list of all CUP request where this role is being used. In field "Provisioning Item" put Business role (PFCG role if you need to see request for PFCG role) and execute. You can give date criteria as well if you are very much sure that beyond that date no request is open or using mentioned role.
This will give you the list of all requests open/closed. Please note that field "Line Item Status in Application" of table GRACREQPROVITEM sometime do not update the status of rejected/cancelled request (see below screen shot for ref.) so please verify the status in Search Request to make sure all requests are in Finished status..
Once above check is complete. You can delete the Business role.
Please note that in order to remove business role, you don't have to remove composite/single role from Business role.
- Deletion of Composite Role:
When you try to delete the Composite role, you may get below error.
In this case also, please make sure that Composite role is not part of any Business role and there are no open request for composite role.
Sometime even after doing above steps you might face the same error, in that case refresh your session and try again. Role will be deleted.