K
KaHo Man
Excluded persons are present in the reconciliation report in HelloID Provisioning. This should by default not be the case. There are however use cases in which this could happen.
Following use case is applicable:
  • person is in scope, entitlements are granted by HelloID (Account, permission).
  • the person is manually excluded in HelloID
  • the Active Directory account is deleted manually, not by HelloID!
  • in the person, the in the past granted entitlements are still shown
I'm aware that the best practise is to also unmanage the entitlements in case you exclude a person. Sadly not everyone is following the best practise....
That is why an option to filter on excluded persons would be nice in the reconciliation report. That way you could actually mark those excluded persons in the reconciliation, to be resolved for 3 months for example.