No. In the default IdentityIQ role model, role acquisition and role recalculation are not handled by the Perform Maintenance task. Role assignment and detection are primarily evaluated during identity refresh processing. The Identity Refresh task can update IdentityCubes, evaluate role assignment rules or role profiles, refresh detected roles, process policy evaluations, and recalculate identity-related governance state. This is the mechanism that keeps role relationships aligned with current identity attributes and account access.
The Perform Maintenance task serves a different operational purpose. It is generally used for system maintenance and cleanup activities, not for determining whether a user should acquire or lose a role. It does not function as the default engine for adjusting role assignments based on changes such as department, job title, location, lifecycle state, or account entitlements.
Therefore, the statement is inaccurate. Keeping role acquisition current is associated with identity refresh and role evaluation logic, not the Perform Maintenance task.
Reference topics: Access Modeling, business roles, IT roles, role assignment, detected roles, Identity Refresh task, IdentityCube recalculation, and Foundational Concepts: tasks versus workflows.
Submit