Security Compliance
Performance issues in ARM when loading the account information
This article will explain how can you improve the performance of the ARM server when searching for an account.
First published date
11/17/2020 3:25 PM
Last published date
11/17/2020 3:25 PM
Overview
In large environments, it can happen that ARM performance is degraded when searching for the AD account in the step of loading all information linked to that AD Object.
Product section
Access Rights Manager
Cause
This is normally a sign that there are groups that contains a large number of users in them and during the process of getting the information ARM needs to go through all of the groups to get the information whether the searched AD Account is in that group or not. If you have several groups with a couple hundred or thousand members this can take a while.
Resolution
The general recommendation is to check if you really need information about all those big groups for actions like search or reports. Usually, for groups like these, it is set that all members of a domain are also part of the groups, so if there is a possibility to exclude them this will improve the performances of the ARM server.
Detailed information on how to blacklist groups can be found on this link .
Detailed information on how to blacklist groups can be found on this link .