AC10 - UAM - Delete all roles before provisionning

[Former Member]

Hi,

with AC10,

how I can do to delete automatically all affected role for a given user before provisioning other roles ?

Another way,

In a same request I want to delete automatically all affected old roles and to do  provisioning of new roles.

(old roles can be very different)

I would like to use template based request...

[amit_bajaj · Accepted solution]

Hi hr triggers will help you in this case if you have hr position based role assignments and removals.

[Former Member]

Hi,

You can select the existing roles when creating the access request and assign action "remove". New roles that are to be assigned have to be given action "assign".

Once the request has gone through all approvals, old roles selected with action "remove" will be removed and assign will be assigned to the users.

There are no templates to automatically include the existing roles, they need to be selected.

Regards,

Ajesh.

[Former Member]

thank for your interesting proposal

but it's a manual action, and end-user can forget to remove old roles...

[Former Member]

Hi Aurelien,

There is no option to automatically remove the existing roles or include all of them to remove in the request. You need to have verification or manual intervention in the workflow process.

Regards,

Ajesh.