Only one API call for role assignment can be performed in modify user post process event handler.

In User Modify Post process event handler there is a use of RoleManager roleManager = Platform.getServiceForEventHandlers(RoleManager.class, null, null, null, null) to get the RoleManager service.

Then using multiple times the roleManager.grantRole or roleManager.revokeRoleGrant, only the first one is actually succeeding.

Is that connected with the orchestration of role assignement event handler that is being started meanwhile?

Geting the Role Manager service using oim client is working fine, but that is not recommended i suppose.

Is there a proper way to remove and grant roles in an event handler?