Revert Identity Roles

Which IIQ version are you inquiring about?

8.4p1

We had an incident where a Business role got assigned to more identities than we wanted. We did do a population refresh with the “Disable deprovisioning of deassigned roles” unchecked, but that also removed some roles that were still needed. Is there an easy way to revert an identity’s role back to what it was prior to the business role being assigned?

You can retrieve the assigned roles from the identity snapshot using a database query and use a bulk upload CSV file to reassign those roles. Alternatively, if assignment criteria are defined in Roles, running the Refresh task will automatically assign the appropriate roles to the identity.

Hi @Alyson_Trad ,

Define the proper role Assignment Rule Criteria , it should get the job done .