Entity record without any dependencies is getting recreated by Scheduled Job after delete

[gk93]

Hi folks,

Client is asking for us to remove some duplicate Entity records from sn_grc_profile table. 

When I delete the entity, it stays deleted until "GRC audit daily data run" and "GRC Daily scheduled data collection job" jobs run. At that point, the record gets recreated with a new sys_id and no information other than Vendor name.

Has anyone else encountered this in the past? What is the correct process to permanently delete an Entity record?

[Community Alums · Accepted solution]

Hi @gk93 ,

 Even if you delete it from Entities, it won't get deleted as you have to delete it from the source table.

As if you can check on Entity filter, you are using a  table where your entities are coming from. So, to meet your requirement, either you delete it from the table itself(which is not recommended as you might be using that somewhere else) or second approach is you can limit it in the entity filter itself.

[gk93]

Hi @Jan Spurlin, 

Thanks for your reply! There was indeed a duplicate on the source table, which I've since deleted. Do I need to manually delete the Entity record itself once I've deleted the duplicate from the GRC Profile Table?

[Jan Spurlin · Accepted solution]

I think what you wrote and what you are asking is slightly different. I think you went back to the source table and deleted the duplicate from there. Now the question is what to do about the record in the sn_grc_profile table - which is the entity.

I have never tested this - so you may want to  test it. I THINK that what will happen the next time the scheduled job (GRC Profile Generation) runs that the entity will be deactivated and any risks and controls related to it will be retired. I don't think you will have to manually delete the entity - but I could be wrong.  From an audit perspective, once an entity has been generated and had controls or risks related to it - you don't want to delete this (at least not in production).  It is possible that the entity is no longer relevant BUT could have been relevant in the past. And an auditor might want to know what happened to the entity in the past.