Hi @nhassan, you can control the Governance groups members by the following solution:
-
Configure a SaaS connector to loopback the ISC permission and reflect the users who are members of a governance group, you can find the connector code in this blog IdentityNow Management Connector and make sure that you get the latest version from the github repo.
-
You can tune the attached workflow that will be triggered when there is a leaver, it will search if the leaver has any governance group assigned to his loopback account as an entitlement with an access attribute “workgroups”, then it will loop removing the governance groups memberships.
LeaversinGovernanceGroups220240205 (1).json (2.6 KB)
Hope that helps, Let me know if you’ve any question.
Thanks!