Group set checkin/checkout behavior
This section outlines the behavior of the Privileged Access Manager Service when a group set check-out/check-in transaction between the server and local workstation is interrupted.
A group set check-out/check-in transaction is considered interrupted when the server has given instructions to the workstation, but does not receive a reply. An interruption can be caused by a failed network connection, for example:
The workstation polls the server for instructions.
The server sends group set check-out/check-in instructions and locks the groups that are part of that set within the database, which are unlocked when a reply from the workstation is received.
If no reply is received from the workstation, the server will consider the set of instructions as lost, and the groups from the set will remain locked until the idarch service unlocks them after five minutes. The server will also resend the instructions at a later poll (see following steps for more information).
As long as the workstation received the set of instructions fully, it will perform the check-out/check-in actions regardless of whether the server received the workstation’s reply and issued a reply back. The workstation also saves a record of the instructions, so it will not execute the same set of instructions twice if the server resends them.
For group set check-outs the end user will see the group set in Checking out status. For group set check-in the end user will see the group set as Checked in.
Within 10 minutes of the groups unlocking, the idarch service will determine if any local service mode instructions have been sent. The interrupted group set check-out/check-in instructions will be prepared for resending.
During the workstation’s next poll the group set check-out/check-in instructions will be re-sent. The workstation will recognize that the instructions have been performed and resend its reply.
Once the server receives the reply from the workstation, it will be updated. For group set check-outs the end user will see the group set as checked out with the Check in button available to them. For group set check-in the end user should already be seeing the group set as checked in.