What should happen when deleting role?

[Tommil]

Hello,

What is the intended behaviour when Deleting/Disabling role from Identity Repository -> Roles -> Delete Role.

Should it remove the role from all of the users and keep the entitlements with the user and accounts OR Should it create remove access / deprovision access tasks for removing the account's entitlements which are part of the deleted role?

And is there differences between Saviynt versions what is the behaviour when Deleting/Disabling roles?

Kind regards,

Tommi

[ParitaSavla · Accepted solution]

When you delete a role from Identity Repository -> Roles -> Delete Role, it should remove the role from all users. 
You need to remove the users from the role before inactivating the role so that the user does not have that particular access linked to the role. 

Also the role wont be entirely deleted. The role_name will be appended with "_deleted"