What problem are you observing?
On the Access Model » Entitlements » Entitlement X » Identities ISC tries to offer the possibility for an admin to remove an entitlement from an identity.
After you click the “Revoke” button, you have to enter a comment:
After you confirm the removal you are greeted with an error:
What is the correct behavior?
One or more of these options:
-
Show what went wrong, the customer was not impressed with this generic error message. The message says “contact the administrator”, but the org admins are generally performing the actions.
-
If the revocation is not allowed, don’t display/offer the revoke button
-
Don’t expect Admins to constantly use the Developer tools in the browser to understand what happens behind the curtains:
-
Separate the admin “access removal”, from user “access request”. Why does we have to enable the request in order to remove an entitlement?
-
Offer the removal functionality on Entitlements request page for each identity as well.
What product feature is this related to?
ISC
What are the steps to reproduce the issue?
- Don’t select “Enable Entitlement Requests”
- Go to an entitlement on the entitlements page
- Try to revoke the entitlement for an identity
- Try to understand the generic error message
Do you have any other information about your environment that may help?
N/a