Enterprise Role Soft Add Feature?

[ejeong]

Hello

we found that as soon as user added into role, all entitlement will get assigned. 

Instead of this, can we do like the way below?

1) Just role to be added to user without any add access task. It will be same when additional entitlement is added into the role

2) when user request any in-role entitlement, it will be auto-approved since it's in-role entitlement

[pruthvi_t]

Hi,

It's not possible to add an Enterprise role without adding any of it's accesses. So the use case mentioned by you would not be possible.

[rushikeshvartak]

This is not valid IGA use case. Holding of tasks can't  be done.

#2 --> This can be managed in workflow

[ejeong]

could you please share you thought how to manage with Workflow for #2? thanks in advance

[rushikeshvartak]

Use Customquery block and validate if entitlement request is already part of user & role definition if yes auto approve else send for addition approval etc

[ejeong]

any idea... how to query for this as example? I thought about that too but no idea how to make query...