Users converted from contractor employee should be provisioned birthright access access as per employee and contractor access given as birthright access for contractor type should be removed.
To achieve this we need to create 2 technical rules and 1 user update rule. The solution is explained below by referring to an example and sample data.
Below are the technical rules:
1. Tech rule to assign BR Access to employees:
2. Tech rule to assign BR Access to contractor:
The above 3 rules will help us achieving following:
When users are onboarding with below attributes
Then it will trigger the user update rule and the will re-evaluate the users access as per the mentioned technical rules in the action.
Then it will create 2 tasks , 1 to remove contractor role access (RTG CNTR RECORD) and 1 to add employee role access (RTG EMP ACCESS).
But removal tasks will be created only for entitlement and not accounts.