and more in a single search tool across platforms. Read the announcement here. |
07/13/2022 12:53 AM
Hi,
What would be the best way to invalidate SAP-related entitlements after certain amount of time (few days)?
We have an user update rule that already has deprovision access tasks for accounts only and access only but the time period is different. Entitlements should be invalidated sooner.
How could this be done? SAP Entitlements are not part of certain role, so deprovisioning role task would not help. What feature would do this task?
Thank you for any ideas!
Solved! Go to Solution.
07/13/2022 10:30 AM
You can enable "Ask For Start Date End Date While Adding Application Role along with Entitlements Request" feature from endpoint & that should create revoke task.
if you want once account is disable end date entitlements also then set TERMINATED_USER_ROLE_ACTION=ENDDATE in connection
07/14/2022 12:03 AM
Thank you 🙂