Did you know? You can selectively deprovision only birthright access for terminated users

[Community_User]

Originally posted on October 17 2020 at 00:58 UTC

1. Why do you need the capability to run user update rules for terminated users?

When you want to selectively deprovision only the birthright access of terminated users and not deprovision other assigned access that you may still want the user to have in case of re-hire scenarios

2. How can you configure user update rules for terminated users?

Set up birthright rule with “Remove Birthright Access if condition fails” option turned ON

Set up user update rules with “Remove Birthright fail access” action

Once above rules are set up, users terminated from SSM UI, feed file OR imports would have only their birthright access revoked