Skip to main content
K
keizow496627
June 2, 2026
Question

User group was deleted by the user for deployment

  • June 2, 2026
  • 8 replies
  • 0 views

Hello,

We experienced an issue where an application deployed to the production environment did not work correctly.

After investigation, we found that the process failed because a required user group was missing. We further checked deletion.log and found that the deployment service account appears to have deleted the group.

Log excerpt:
 2026-05-29 10:18:57,597 [http-nio-8080-exec-28] INFO com.appiancorp.common.logging.DeleteLogger - Successful deletion of objects: id=3126; types=group; names=["xxxx"]; deleted by user=[xxxx].

However, we could not find any deployment record corresponding to this timestamp.

My question is:
Is there a way to trace the actual operation performed by the deployment user account, even if there is no deployment record at that time?

Any guidance would be appreciated.

Thank you.



    8 replies

    harshas2775
    harshas2775
    June 2, 2026

    Deletions are done manually or via a process/rule (using Delete Group smart service), its is not feasible to delete a group as part of deployments. So check in your team whoever has the credentials for deployment user - most likely someone deleted this group from Appian Designer. 

    Apart from deletion.log you can check the design_objects.csv as well for details but apart from timestamp and who did what action, which you already know - I am afraid you wont be able to get more information further. I would suggest check with your team internally about this.

    K
    keizow496627Author
    June 2, 2026

    Hello Harsha,

    Thank you for your response.

    I’d like to add one clarification: in my previous post, I did not explicitly mention that the user account shown in the log was our deployment account. Because of that, the situation may not have been fully clear.

    To restate the issue more precisely:

    • An application deployed to production did not work correctly.
    • We found that the failure was caused by a missing user group.
    • In deletion.log, we confirmed that the group was deleted by our deployment-related account.


    The problem is that we could not find any deployment record at that timestamp.

    My question is:
    What is the recommended way to investigate whether someone manually deleted the group using the deployment account?

    For example:

    • Are there any logs or audit records other than deletion.log and design_objects.csv that could help identify the action more precisely?
    • Is there any way to trace the source of the deletion activity, such as the UI action, process execution, or user session?
    • If the deployment account was used interactively, is there any record that can show who accessed it or from where?

    Any guidance would be greatly appreciated.

    Thank you.

    stefanhelzle0001
    stefanhelzle0001
    June 2, 2026

    A deployment does never delete an object.

    The deployment account should not be allowed to log in to the Appian UI.

    There is a log file that logs all user authentications.

    Terms & ConditionsAccessibility statement