advanced business role authorization logic

[aimeel]

Expand business role authorization logic to include if statement logic to determine the highest level qualifying permission authorized for an Application. For example: I match a business role as a staff member but I am also a faculty member in another business role and each of the business roles provides me with authorization to application X. The permission to Application X I get as a staff member is a lower level than the permission I get as a faculty member. I need to keep my faculty member permission in Application X rather than be provisioned for a lower level staff permission in Application X.