This document will explain the delay and offer a way to decrease that time period
In EEM you have the ability to either manually create users when connected to the internal data store, or you can have EEM connected to your external directory server, such as Active Directory.
In either case, when you add a user to the CA Process Automation application groups in EEM, you may find that they will not immediately be able to log in to PAM.
This is because there is a 30 minute interval for caching between Process Automation and EEM.
This 30 minute cache interval can be modified within CA Process Automation, but caution should be taken when doing so.
Setting the interval too short could cause performance issues.
If you do find that you need to decrease the interval, it is suggested to decrease by 10 minutes and work with that setting for a period of time to make sure that it is not affecting performance.
If the 20 minute interval is still not sufficient, and has also not caused performance issues, then take it down to a 10 minute interval.
CA Technical Support does not recommend decreasing the value to less than 10 minutes.
To make the modification, log in to CA Process Automation as an admin user.
For versions 3.1 SP01 and earlier, click on the client link in the upper right.
Make sure you are in the configuration browser, lock the domain and on the security tab modify the value for EEM Cache Update Interval (sec). The default value is 1800 which is 30 minutes. Change this to 1200 (20 minutes), apply, save and unlock the domain.
For versions 4.0 and later, click on the Configuration tab.
Select the configuration browser palette if it is not already displayed by default.
Lock the domain and on the security tab modify the value for EEM Cache Update Interval (sec). The default value is 1800 which is 30 minutes. Change this to 1200 (20 minutes), apply, save and unlock the domain.
Again, if you find that you need to decrease the time further, follow the same steps changing the value to 600 (10 minutes).