Skip to main content

Clear redundant roles

Description

A high level profile can contain or grant application permissions. On the other side, application permissions can contain or grant low level permissions. All of them are referred to generally as roles.

Some users could have been granted both high level profiles and application permissions or low level permissions.

In that case, low level roles can be removed from the Soffid database, as they are inherited through role inheritance rules.

This tool identifies any low level roles granted to users at the same time that its owner high level role, and removes them.

Screen overview


  1. Roles
  2. User

Actions

Introduction

Next

Allows you to browse to the Filter roles step.

Filter roles

Undo

Allows you to return to the previous step without applying any changes.

Next

Once you search for the proper Roles, you can click the Next button to browse to the Preview result step.

Preview result

Undo

Allows you to return to the previous step without applying any changes.

Next

Allows you to run the Clear redundant roles process to the set of roles & accounts there are in the list.

Finish

Undo

Allows you to quit without applying any changes.