Best way to disable an account once roles are removed

Identity Security Cloud (ISC) ISC Discussion and Questions
, , , , ,
1

Hi

What is the best way to automatically disable an account once a user has no more roles for this source?

Is it workflow? or are there other methods?

Example would be say SalesForce or Web Service source. Say roles are requestable, so when roles are revoked, and the user has no more roles for this source, we want to disable their account.

Thank you

2

@jrossicare before rule can probably work well here which can be triggered on entitlement removal

3

Hello,

You can use a before provisioning cloud rule for the source which will check for remove entitlement request and also, it will look into respective identity of the user whether it has any roles assigned, if no, you can trigger an Account Disable Request.

4

Thanks both, before rule seems better way to go than workflow.