Certification campaign only on manually requested rights

[mcheek (Mark Cheek)]

In my experience that I documented in my linked topic, if you run an access item campaign against a specific access profile, identities that were assigned that access profile automatically via a role are not included. Hope this helps

Inclusion of Entitlements/APs assigned via Role in Campaigns

I was recently trying out the following scenario Role has the following Access Profiles Access Profile A Access Profile B Access Profile C I assigned a user this role via access request (the role has no membership criteria). I then created an access item certification campaign for Access Profile B. The user is not included in this campaign, assuming because the access profile is assigned by the role? Is this by design? If so, this is kind of disappointing because we have access that must b…