Can someone explain to me how the system decides to create an account change vs a user change?
For example, on the PV_CHANGE_REQUEST_DETAIL table, some changes are listed as Type = RemoveAppRoleFromAccount and some are listed as RemoveUserFromAppRole.
There are two conditions where a change would be Account Change:
As for the difference between both:
User Changes
Account Changes
For example: User U1 has two accounts A1, A2. If the change request Change Item says Add A1 to Group G1, then it will only verify if A1 gets the Group ... not A2 even though both are owned by the same user.