Picked up · Identity DEEN

Deletion in Identity Provisioning: what applies and what takes precedence

community.sap.comivelinakiryakov, SAP · 19 March 2026 To Delete or Not to Delete: No Room for Drama in Identity Provisioning Go to source ↗
Picked up by Siegfried Zeilinger · AI-assisted: editing, translation
Diesen Beitrag auf Deutsch lesen

Why it's worth reading

Adding things is easy. Deleting them makes people nervous, and in Identity Provisioning rightly so: properties such as ips.delete.existedbefore.entities, the deleteEntity scope, filters and conditions all interact, and precedence decides. Important if SAP AS ABAP is your target system: since 27 January 2026, the job also removes group assignments there that have disappeared from the source.

If you provision into ABAP with IPS, you want to know this before the next job runs. Not after.

More finds

community.sap.comSAP Cloud ALM: the ITSM Console shows every call to the ticketing systemnews.sap.comJoule Studio and NVIDIA OpenShell: how SAP plans to keep AI agents on a leashgithub.comTerraform and entitlements: where depends_on belongs

Discussion

Submitting stores your name, email and comment. See our privacy policy.