# Extended Role Attribute Identity Value

**URL:** <https://community.sailpoint.com/discuss/t/extended-role-attribute-identity-value/35502>\
**Category:** Lifecycle & Governance\
**Created:** [January 29, 2025, 1:14pm UTC](https://community.sailpoint.com/discuss/t/extended-role-attribute-identity-value/35502 "2025-01-29T13:14:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![otawakol](https://avatars.discourse-cdn.com/v4/letter/o/43a26b/32.png) [@otawakol](https://community.sailpoint.com/discuss/u/otawakol)\
**Post date:** [January 29, 2025, 1:14pm UTC](https://community.sailpoint.com/discuss/t/extended-role-attribute-identity-value/35502/1 "2025-01-29T13:14:56Z")

</div>

Hello all!

We have an extended role attribute of type “Identity” where we assign users to specific roles as a role custodian.

The issue we have been running into is that if that user leaves and the cube is pruned, that value never actually drops from the bundle which leaves behind bad and incorrect data.

Any ideas on how to tackle this?

Thank you!

---

<div class="post-metadata">

**Author:** ![cinilsunny](https://sea3.discourse-cdn.com/sailpoint2/discuss/user_avatar/community.sailpoint.com/cinilsunny/32/17819_2.png) [@cinilsunny](https://community.sailpoint.com/discuss/u/cinilsunny)\
**Post date:** [January 29, 2025, 1:38pm UTC](https://community.sailpoint.com/discuss/t/extended-role-attribute-identity-value/35502/2 "2025-01-29T13:38:05Z")

</div>

Options:

1. Run a custom scheduled task to look for such roles with inactive users and clean it up.
2. Create a leaver event, associate workflow / rule to it and put the logic in it to clean up the roles associated with the leaver.

---

<div class="post-metadata">

**Author:** ![binod\_bista](https://sea3.discourse-cdn.com/sailpoint2/discuss/user_avatar/community.sailpoint.com/binod_bista/32/17316_2.png) [@binod\_bista](https://community.sailpoint.com/discuss/u/binod_bista)\
**Post date:** [January 30, 2025, 3:08pm UTC](https://community.sailpoint.com/discuss/t/extended-role-attribute-identity-value/35502/3 "2025-01-30T15:08:21Z")

</div>

This should be taken care from your leaver workflow. When a user is terminated/leaves, all the ownership should be transferred from the leaving user to their manager or some other workgroup. Possibly you would need to do the same thing for your mover process if applicable.

Thanks,

B.B