We want to be able to transition a user's access from a contractor to an employee when their employee status changes.
- We have two enterprise roles with some overlapping access.
- Both roles are provisioned by birthright technical rules that are set to remove access if the criteria fails.
- The problem is that Saviynt is evaluating and creating the tasks to add the user to the new role before considering the remove from the other rule. The overlapping access is being auto-completed as "No Action Required" which is correct however then Saviynt review the failed rule and removes the access that that auto-completion was for. The end result is that the user loses all the overlapping access.
- We already tried setting the task execution hierarchy. That did not work.
- We need to prevent Saviynt from creating the remove access for the overlapping access OR from auto-completing the add access with no action required.