Will removing an access profile from a role in the “Manage Access” tab remove the entitlement(s) assigned by that access profile?
We’re creating new roles to assign some access but need to remove the access profile from the old role and want to make sure this will not cause an impact / loss in access
It will not. The documentation on how roles behave when access is removed from them covers this and a variety of other scenarios: Managing Roles - SailPoint Identity Services
Access is only removed when a user is removed from a role with access defined through membership criteria logic. Removing the entitlement or access profile only prevents that access from being provisioned going forward.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.