In our environment, we have Business Roles configured tied to Active Directory groups to automate membership based on attribute criteria. We've begun noticing that the Dynamic Role calculation number for membership differs from the associated AD group membership count. Forcing recalculation doesn't force Q1IM V6.0.2 to pull members that dont meet the dynamic role criteria out of the group. Has anyone seen similar issues with AD groups populated via dynamic role not syncing correctly, most notably with membership removal?
↧