Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-5186: When moving batches of users between OUs provisioning roles may temporarily be removed

Centrify Identity Service, App Edition ,  

12 April,16 at 11:14 AM

Applies to: Centrify for SaaS & Provisioning 


When users are moved between OUs in batches, some of the users are removed from the provisioning roles and subsequently may have their licenses revoked.


The reason this occurs is because when changes to users are done, role memberships and attribute changes as well, are not propagated instantaneously. 

The Cloud connector's AD watcher usually takes a few minutes before it propagates those changes to the cloud service.  The cloud then takes a few minutes before processing occurs, depending on the current cloud load.  If provisioning is started immediately thereafter, old data will be seen.

This can be resolved by either waiting for the next sync to take place within 24 hours, or manually forcing a sync under:
  • Cloud Manager > Settings > Provisioning > Start Sync.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.