Hi Felipe,
The problem is that we have identities with entitlements in the ‘Basic IT Users’ role for reasons other than being a member of the ‘Basic IT Users’ role. The examples I gave don’t exactly represent my situation but were more chosen for illustrative purposes. The bottom line is that I need a role criteria which definitively determines if the identity is a member of an other role.
All my best,
Thad