our objective is to remove some entitlements from role but not to generate "remove access" tasks.
Could we do that by following steps below?
1. Delete Roles which will make role status to inactive
2. Remove entitlement from the role
3. Re-enable Roles.
will it work as expected?
Solved! Go to Solution.
Once you delete the roles, you will not be able to remove the entitlements. Better way would be as a one time , you can identify the entitlement value of which entitlements you need to remove and for those values in account_entitlements1 table you can make the column ( assignedfromroles,assignedfromroles) as null so that the tasks are not created. ( you can use custom query job to make it as null ).