BRF + Setup for change role account request.
I have one requirement in GRC request.
Scenario : I want to assign some roles to user, but user is already expired (in past validity). So in that case if i will raise a change account role assignment request (only to assign some extra role to existing user ) with roles which will lead to conflict, then the conflict can't be checked during approval process as user is in past validity. So user will be assigned with conflicting role, and later when user will get activated then the SOD will pop up during the report.
Requirement : So now the requirement is that, requester should not able to raise a role assignment request when user is in past validity.
So what will be the BRF+ configuration for this scenario only. Can this be done for only change role request type with the existing BRF+ Initiator rule.
Please let me know in case more information.
Thanks in advance.