Permission lost during collection then re-added
Has anybody had this happen to them?
AD permission collector:
During the collection at least one AD group that we know of was marked as deleted in IG.
Its been in AD in the same place since 2016.
In the permission_change table change_type was set to REMOVED.
The next day when the collection ran again it was back in IG and has the change_type ADDED.
It's still the same unique_permission_id.
Re: Permission lost during collection then re-added
If you had the com.netiq.daas I think level of logging kicked up, maybe you had a timeout on collecting the groups members on one day and not the next?
Side note: anyone know if IDG can get around the max # of attributes returned in LDAP limit in AD?