Issues
Reconciliation issues are discrepancies between the state of entitlements in HelloID and the actual accounts and permissions in a target system. They are listed in a reconciliation report, which allows you to View issues and Resolve issues.
Which actions can be taken to resolve an issue depends on the type of issue.
Issue | Description | |
|---|---|---|
Account unmanaged | The account exists in Active Directory, but no corresponding state can be found in HelloID. | Resolve issue Exclude account Disable account (only available if account is enabled) Delete account |
Account missing | An account entitlement exists in HelloID, but no corresponding account exists in Active Directory. | Resolve issue Create account |
Account incorrectly has access | The account enable entitlement has not been granted in HelloID. However, the account is enabled in Active Directory. | Resolve issue Disable account |
Account incorrectly has no access | Either the account is enabled in Active Directory but no corresponding account access entitlement exists, or a corresponding account access entitlement is found but the account is disabled in Active Directory. | Resolve issue Enable account |
Person relates to multiple accounts | Multiple accounts have the same correlation value as the person; or, an account (reference) is already linked to the person in HelloID, while one or more accounts have the same correlation value. | Resolve issue |
Account relates to multiple persons | The account's correlation key value matches with multiple persons in HelloID, or the account is linked to multiple persons in HelloID. NoteWhen the same account is linked to multiple persons in HelloID, this poses a significant risk. If one user leaves the organization, the account could be disabled or deleted, resulting in the other user(s) losing access to it. | Resolve issue |
Permission unmanaged | A permission membership exists in Active Directory, but the entitlement is not granted by HelloID through the business rules. | Resolve issue Remove permission |
Permission missing | A permission entitlement for the account exists in HelloID but is not granted in Active Directory. | Resolve issue Add permission |