Clear redundant roles
Description
A high level profile can contain or grant application permissions. On the other side, application permissions can contain or grant low level permissions. All of them are referred to generally as roles.
Some users could have been granted both high level profiles and application permissions or low level permissions.
In that case, low level roles can be removed from the Soffid database, as they are inherited through role inheritance rules.
This tool identifies any low level roles granted to users at the same time that its owner high level role, and removes them.
Screen overview
Related objects
Actions
Introduction
A brief description of this process.
|
Next |
Allows you to browse to the Filter roles step. |
Filter roles
Allows you to filter a subset of roles to apply the process.
|
Undo |
Allows you to return to the previous step without applying any changes. |
|
Next |
Once you search for the proper Roles, you can click the Next button to browse to the Preview result step. |
Preview result
Displays a list with the subset filtered of roles.
|
Undo |
Allows you to return to the previous step without applying any changes. |
|
Next |
Allows you to run the Clear redundant roles process to the subset of roles & accounts there are in the list. |