How to skip role membership evaluation for some identities?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi all,

Is there a way to skip role membership evaluation for some identities? Can we have a criteria like if the identity attribute “excludeFlag” equals to 1, then we skip the role membership evaluation? So that the identity will keep it’s current role assignments until I reset the excludeFlag to 0.

Regards
Ronald

2

The only way I can see that working is if you add the excludeFlag to every role so that the criteria will be false if the value is 1. I don’t know of any other way to do it.