You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/app-provisioning/accidental-deletions.md
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,7 +21,7 @@ The feature lets you specify a deletion threshold, above which an admin
21
21
needs to explicitly choose to allow the deletions to be processed.
22
22
23
23
> [!NOTE]
24
-
> Accidental deletions are not supported for our Workday / SuccessFactors integrations. It is also not supported for changes in scoping (e.g. changing a scoping filter or changing from "sync all users and groups" to "sync assigned users and groups". Until the accidental deletions prevention feature is fully released, you will need to access the Azure portal using this URL: https://aka.ms/AccidentalDeletionsPreview
24
+
> Accidental deletions are not supported for our Workday / SuccessFactors integrations. It is also not supported for changes in scoping (e.g. changing a scoping filter or changing from "sync all users and groups" to "sync assigned users and groups"). Until the accidental deletions prevention feature is fully released, you'll need to access the Azure portal using this URL: https://aka.ms/AccidentalDeletionsPreview
25
25
26
26
27
27
## Configure accidental deletion prevention
@@ -30,18 +30,18 @@ To enable accidental deletion prevention:
30
30
2. Select **Enterprise applications** and then select your app.
31
31
3. Select **Provisioning** and then on the provisioning page select **Edit provisioning**.
32
32
4. Under **Settings**, select the **Prevent accidental deletions** checkbox and specify a deletion
33
-
threshold. Also, be sure the notification email address is completed. If the deletion threshold his met and email will be sent.
33
+
threshold. Also, be sure the notification email address is completed. If the deletion threshold is met an email will be sent.
34
34
5. Select **Save**, to save the changes.
35
35
36
36
When the deletion threshold is met, the job will go into quarantine and a notification email will be sent. The quarantined job can then be allowed or rejected. To learn more about quarantine behavior, see [Application provisioning in quarantine status](application-provisioning-quarantine-status.md).
37
37
38
38
## Known limitations
39
39
There are two key limitations to be aware of and are actively working to address:
40
-
- HR-driven provisioning from Workday and SuccessFactors do not support the accidental deletions feature.
41
-
- Changes to your provisioning configuration (e.g. changing scoping) is not supported by the accidental deletions feature.
40
+
- HR-driven provisioning from Workday and SuccessFactors don't support the accidental deletions feature.
41
+
- Changes to your provisioning configuration (e.g. changing scoping) isn't supported by the accidental deletions feature.
42
42
43
43
## Recovering from an accidental deletion
44
-
If you encounter an accidental deletion you will see it on the provisioning status page. It will say **Provisioning has been quarantined. See quarantine details for more information.**.
44
+
If you encounter an accidental deletion you'll see it on the provisioning status page. It will say **Provisioning has been quarantined. See quarantine details for more information.**.
45
45
46
46
You can click either **Allow deletes** or **View provisioning logs**.
47
47
@@ -51,20 +51,20 @@ The **Allow deletes** action will delete the objects that triggered the accident
51
51
52
52
1. Select **Allow deletes**.
53
53
2. Click **Yes** on the confirmation to allow the deletions.
54
-
3. You will see confirmation that the deletions were accepted and the status will return to healthy with the next cycle.
54
+
3. You'll see confirmation that the deletions were accepted and the status will return to healthy with the next cycle.
55
55
56
56
### Rejecting deletions
57
57
58
-
If you do not want to allow the deletions, you need to do the following:
58
+
If you don't want to allow the deletions, you need to do the following:
59
59
- Investigate the source of the deletions. You can use the provisioning logs for details.
60
60
- Prevent the deletion by assigning the user / group to the app again, restoring the user / group, or updating your provisioning configuration.
61
-
- Once you've made the necessary changes to prevent the user / group from being deleted, restart provisioning. Please do not restart provisioning until you've made the necessary changes to prevent the users / groups from being deleted.
61
+
- Once you've made the necessary changes to prevent the user / group from being deleted, restart provisioning. Please don't restart provisioning until you've made the necessary changes to prevent the users / groups from being deleted.
62
62
63
63
64
64
### Test deletion prevention
65
65
You can test the feature by triggering disable / deletion events by setting the threshold to a low number, for example 3, and then changing scoping filters, un-assigning users, and deleting users from the directory (see common scenarios in next section).
66
66
67
-
Let the provisioning job run (20 – 40 mins) and navigate back to the provisioning page. You will see the provisioning job in quarantine and can choose to allow the deletions or review the provisioning logs to understand why the deletions occurred.
67
+
Let the provisioning job run (20 – 40 mins) and navigate back to the provisioning page. You'll see the provisioning job in quarantine and can choose to allow the deletions or review the provisioning logs to understand why the deletions occurred.
68
68
69
69
## Common de-provisioning scenarios to test
70
70
- Delete a user / put them into the recycle bin.
@@ -83,7 +83,7 @@ application could include: unassigning the user from the application and soft /
83
83
evaluated for deletion count towards the deletion threshold. In addition to deletions, the same functionality also works for disables.
84
84
85
85
### What is the interval that the deletion threshold is evaluated on?
86
-
It is evaluated each cycle. If the number of deletions does not exceed the threshold during a
86
+
It is evaluated each cycle. If the number of deletions doesn't exceed the threshold during a
87
87
single cycle, the “circuit breaker” won’t be triggered. If multiple cycles are needed to reach a
88
88
steady state, the deletion threshold will be evaluated per cycle.
0 commit comments