We have a a couple of similarly configured privileges which appear to be being deleted by the system. The deletions are always occurring at 2am or shortly thereafter. I have searched our configuration and I can't find any job running at 2am that might account for this. Equally if I check the audit table the audit ID of the deprovision task (triggered by the privilege delete) has a REFAUDIT entry that relates right back to the original provision event a number of days prior. I'm 99% sure there is no pending value object at play here, not least because the provision process (it's attached to the repository) completes as expected.
Does anyone have a suggestion of how I can deprovision event back to its trigger point?
Interestingly I don't believe this was not an issue in 7.1, we've only started to see this issue since we moved to 7.2 sp7 a couple of months ago.
Thanks!