01/04/2023 09:00 PM
Hello,
1.Can we remove roles only from users without remove access for entitlements?
2. Here is case
Role 1 : Ent a Ent b Ent c
Role 2 : Ent b End e Ent f
What we found is when user got removed Role 1 and get new role (Role 2)
we are expecting ent b is not revoked as it's still included in new role.
But we found that remove access is still created for this use case. Is there any other way we can prevent?
Thanks
01/04/2023 09:12 PM
use same workflow for add & remove this will solve your issue
01/04/2023 10:06 PM
Our use case is about roles assigned by tech rules.
If i am in Company A. I am supposed to get Role 1 then when transferred, i am supposed to get Role 2 and role 1 should be removed.
But i found that remove access is created even if another role has same entitlements.
One thing i noticed in user update history is..
Role_Added for Role 2 happended earlier than Role_removed Role 1. So i am suspecting if this is making remove access tasks. But i am not sure if we can control the order..
01/04/2023 10:07 PM
Most of enterprise roles.. we are using brithright assignment based of company name or department code
01/04/2023 10:14 PM
remove role action can be used in analytics to just remove base role
01/04/2023 10:19 PM
Deprovision role using actionable report seems not available now. But if we remove role using report, do you mean it will remove role only? Leaving all entitlement even if "assignedfromRole" has that rolekey?
01/04/2023 10:19 PM
I meant its not available in 5.5 version we currently have
01/04/2023 10:32 PM
Yes