Requestable Birthright Roles

[ewalton]

As we review our system's policies, a key question arises: should birthright enterprise roles be requestable, or is this privilege reserved exclusively for roles designated for request via ARS (Automated Request System)? Your guidance on this matter is highly valued.

Thank you in advance for your assistance.

[rushikeshvartak · Accepted solution]

• Birthright roles should be created and should be provided via birthright rules ( user update / technical rules)
• this should not be requestable on ARS
• you can avoid doing certification for birthright roles

[AmitM · Accepted solution]

HI @ewalton , Birthright roles by the definition of it, are to be provisioned for everybody so asking everybody to request a known thing is a bit overkill.

I would say , birthright roles to be automated by rules and other roles that are giving you elevated access on top of birth right needs approval process and hence via ARS.

Thanks,

Amit

If this answers your query, Please ACCEPT SOLUTION and give KUDOS.