Provisioning Reference Guide › Advanced Configuration Options › Domain Configuration › Synchronization Parameters › Exclude Nested Roles on User Role Removal

Previous Topic: Remove Account Template Values from Accounts

Next Topic: Force Single Account Across Multiple Containers
Exclude Nested Roles on User Role Removal

Values: No (default) or Yes

Description: Enables the alternative user removal synchronization behavior that excludes nested roles from evaluation. Nested Roles are roles that include other roles. Enabling this option has performance benefits as nested role evaluation is an expensive operation.

Important! Enabling this option when nested roles are used can cause CA IdentityMinder to unexpectedly delete accounts from a user.