Issues
Reconciliation issues are discrepancies between the state of entitlements in HelloID and the actual accounts and permissions in a target system. They are listed in a reconciliation report, which allows you to View issues and Resolve issues.
Which actions can be taken to resolve an issue depends on the type of issue.
Issue | Description | |
---|---|---|
Account unmanaged | The account exists in the target system, but no corresponding state can be found in HelloID. | Disable account (only available if account is enabled) Delete account Resolve issue Exclude issue |
Account missing | An account entitlement exists in HelloID, but no corresponding account exists in the target system. | Create account Resolve issue Exclude issue |
Account incorrectly has access | The account enable entitlement has not been granted in HelloID. However, the account is enabled in the target system. | Disable account Resolve issue Exclude issue |
Account incorrectly has no access | Either the account is enabled in the target system but no corresponding account access entitlement exists, or a corresponding account access entitlement is found but the account is disabled in the target system. | Enable account Resolve issue Exclude issue |
Person relates to multiple accounts | Multiple accounts have the same correlation value as the person; or, an account (reference) is already linked to the person in HelloID, while one or more accounts have the same correlation value. | Resolve issue Exclude issue |
Account relates to multiple persons | The account's correlation key value matches with multiple persons in HelloID, or the account is linked to multiple persons in HelloID. NoteWhen the same account is linked to multiple persons in HelloID, this poses a significant risk. If one user leaves the organization, the account could be disabled or deleted, resulting in the other user(s) losing access to it. | Resolve issue Exclude issue |
Permission unmanaged | A permission membership exists in the target system, but the entitlement is not granted by HelloID through the business rules. | Remove permission Resolve issue Exclude issue |
Permission missing | A permission entitlement for the account exists in HelloID but is not granted in the target system. | Add permission Resolve issue Exclude issue |
Subpermission unmanaged | A sub-permission membership exists in the target system, but the entitlement is not granted by HelloID. | Resolve issue Exclude issue |
Subpermission missing | A sub-permission entitlement for the account exists in HelloID but is not granted in the target system. | Resolve issue Exclude issue |