• State Verified Answer
  • Replies reply
    1
  • Subscribers subscribers
    17
  • Views views
    156
  • Users 0 members are here

IGA business role membership expressions

SaifeeK

Hi,

Is it possible in business role membership expression to exclude all members of another business role. 

I have a use case which requires that a user is added to only one of the business role, since these business role has similar criteria, the users can end up in more than one role which isn't desired in this case. There are several options in the membership expression to include or exclude a user or group, there is even one to include members of another business role, but I couldn't find anything to exclude one. Has anyone had a similar use case, and what have you done to achieve this.

  • Verified Answer

    +1  

    Hi Saifee,

    Well, it depends. Generally, there is no way to explicitly exclude (other) BR members directly in a BR definition.

    But you could try the following:

    First option (and probably the best) would be to tweak your BR membership criteria to better target only those users who should really be members of the role(s), to reduce overlap.

    Second option would be to exclude criteria at the user attribute level in the membership expressions, e.g. via a "NONE/NOT" comparison.

    Third option would be to define "SoD" policies that prevent unwanted BR combinations from a business point of view. A very simple example could be the following:

    Whereas SoDs typically make the most sense at a permission level...

    Best regards,
    Philipp

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.