Clear redundant roles
Description
A high level profile can contain or grant application permissions. On the other side, application permissions can contain or grant low level permissions. All of them are referred to generally as roles.
Some users could have been granted both high level profiles and application permissions or low level permissions.
In that case, low level roles can be removed from the Soffid database, as they are inherited through role inheritance rules.
This tool identifies any low level roles granted to users at the same time that its owner high level role, and removes them.
Screen overview
Related objects
Actions
Introduction
|
Next |
Allows you to browse to the Filter roles step. |
Filter roles
|
Undo |
Allows you to return to the previous step without applying any changes. |
|
Next |
Once you search for the proper Roles, you can click the Next button to browse to the Preview result step. |
Preview result
|
Undo |
Allows you to return to the previous step without applying any changes. |
|
Next |
Allows you to run the Clear redundant roles process to the set of roles & accounts there are in the list. |
Finish
|
Undo |
Allows you to quit without applying any changes. |