Account Group Aggregation

An Account Group Aggregation task scans applications and aggregates account groups and application object types. These results are then used for group certification (either permissions or membership), for displaying group information in certifications, and for performing identity searches.

The information scanned and updated is determined by the following criteria when the task is created or edited. You can use any combination of options to build a task.

Option	Description
Select applications to scan	The dropdown list of all applications configured to work with IdentityIQ.
Filter object types to scan	This option is only available for applications on which multiple application objects can exist. This option is not available if you select to scan more than one application. The list of all object types or account groups associated with the selected application. If nothing is selected, all object types and account groups are included. It might become important to scan object types separately if they share attributes.
Enable Delta Aggregation	Enable the connector to aggregate only those account groups or application objects that have changed since the last aggregation. This requires support by the connector.
Detect deleted account groups	Detect and delete any account group or application object that was deleted on the native application since the last aggregation task was run.
Automatically promote descriptions to this locale	The default locale for the description attribute of the account group or application object. This option is used if an existing description locale is not found.
Description attribute (default description)	The Description Attribute defined in the Application Group Schema overwrites any value set here. The attribute that stores the description. This value defaults to the value description if this option is not set.
Group Aggregation Refresh Rule	The rule used to set the owner or modify the account group when it is created or refreshed. Click the [...] icon to launch the Rule Editor to modify the rule if needed.
Promote Classifications	Promote classification from the ResourceObject classification to the ManagedAttribute.
Enable partitioning	Enable partitioning of this task across multiple hosts. Partitioning must be configured globally before this option can be used. See Partitioning.
Number of partitions	Specify a number of partitions. If no number is specified, IdentityIQ calculates an optimal number based on available request servers.
Loss Limit	The loss limit sets the maximum number of identities that will be reprocessed in case of a sudden termination of a partitioned refresh. This option is used only when partitioning is enabled. See Loss Limits.
Terminate when maximum number of errors is exceeded	Terminate after the specified number of errors occurs. If the database is available, the task result contains a message indicating that the task was terminated due to excessive errors. If the database is down, the task result cannot be persisted and the task might appear to remain in the pending state. Maximum errors before termination Number of errors to tolerate before terminating the task.