What is Person Maintenance JobWhat is Person Maintenance Job

What

You have issues with Users getting locked. A reason can be the Person Maintenance job.

Why

This job will update Person and User content to ensure correct access to Pure, license count and sorting of affiliations. The actions done by the job is:

• Update roles that should no longer be assigned to a person's User e.g. when the person becomes former.
• Update FTE when organisation associations are not active anymore.
• Update order of organisational affiliations (as defined in Administrator > Persons > Organisation affiliation sorting).
• Update roles because of time passing. E.g. removing Person and User relation because Personal user or Student user are reaching the end date and becoming former without being otherwise updated or saved.
• Changes to the grace period for either staff or students may also cause the roles to be updated, since this may change a former person to be current when taking the grace period into account.
• Update the User account lock status based on the presence of assigned roles.
• Reports if a person has an affiliation (PersonOrganisationAssociation) with an end date which is earlier than the start date. It is shown as a Warning in the job log.

Note: If a role or an active person association is added, then the job will unlock those user accounts that where previously locked by the job, due to missing active person association (student or staff) or no roles assigned.

If you don't want this job to lock the User, It is possible to change lock strategy:

1. Go to Administrator > Jobs > Cron job scheduling
2. Open the Person Maintenance job and click Edit configuration
3. Open the default configuration and toggle "Lock user accounts without applicable role" off
   
   When you toggle this off the job will no longer lock the Users that gets their Person or Role removed. And it will unlock all the users that was previously locked by the job.

From 5.19.0 it is possible to keep Trusted users unlocked even if the Person or Role is removed.

• Go to Administrator > Jobs > Cron job scheduling
• Open the Person Maintenance job and click Edit configuration
• Open the default configurations and toggle "Do not lock user accounts with trusted user roles" on
  
  Note: If a Trusted user is added after the job locked the User, then it will not be reopened on the next jobrun. This is to avoid that Personal users can give former active Users access to Pure. Alternative solutions to this is being investigated in PURESUPPORT-73371.

More information

5.12.0 Release notes
5.15.0 Release notes
Note: Some of this information is for internal use only and might not be accessible.