revoke account using dependency in different order
K
KaHo Man
The feature request https://feedback.helloid.com/provisioning/p/add-dependency-in-account-and-permission-flow-with-dependent-system works great. But in the revoke account part the execution order seems unnatural. The accounts which are dependend on the primary system are not revoke first before the primary system account. Which seems weird, because in the create event the primary system is created/updated first before de dependend system account is created. In the revoking side I would assume the primary system will be revoked last.
R
Randolf Broer
I have exactly the same problem. I create AD accounts for my customer and afterwards I correlate the Entra ID account to add phone and email authentication methods. When revoking (for whatever reason) it starts revoking additional entitlements before removing the account. So far so good. Well, not. Because this is only considered the AD account. But since the Entra entitlements are added later, I want them to be removed first and not only after the AD account is already removed. Sometimes the Entra Connect Sync is so fast that the account is already removed from Entra and HelloID will remain trying to remove the entitlement for ever but will never succeed since the account is gone.