Hi everyone,
We created a new role (roles->create role) to add new application role to existing accounts.
The created role is completed successfully and we are able to see the application which is added by role, under the relevant account. There is no problem till these step.
The problem is that we are not able to see the new application role under the relevant account when we run the user access review.
We are waiting your comments and suggest.
Regards,
Hi Boris,
Thank you so much for your reply.
The problem is solved after changed some configuration.
Regards,
Hi Boris,
Unfortunate, our problem is again continue.
We created an account like below picture and we added a few application role 'ADAREAD' and a few entitlements.
We are able to see the application role and entitlements under the account which is added by role.
But again we are not able to see the new application role under the relevant account when we run the user access review.
Regards,
As far as I know, in the User Review you will see only the roles and access rights which were given not via a roles.
If all the access rights were given to a user via roles, then you shouldn't see any thing besides the roles in the review.
Hi Boris,
This is the first time we are hearing this. How can we confirm this information? Then how are we supposed perform certification in case reviewers only see the business roles but not the entitlements that are indirectly acquired by user.
The idea is that reviews make it easier for the person that reviews. So a line manager usually doesn't have much knowledge on the entitlements, app roles or groups in the systems, but he does have knowledge on what roles a person should have. So that is why the line manager reviews what roles a person has and what out of role authorisations this person has.
An application and role owner review what authorisations are part of the role as they have knowledge on this.
This is the whole idea behind roles to make things easier for everyone.
If you want to only review the authorisations (entitlements, app roles and groups) you can either don't use roles or (and i'm not 100% sure if this works) exclude roles in your review definition s it only shows authorisations
regards
Edwin
Hi,
Can you share some relevant screenshots - of a Role, User's access tab, reviews (what is expected and what is the actual)?