• State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 96 subscribers
  • Views 4701 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disable Business Roles.

RSharma
over 7 years ago

Hello,

 

I created a business role with coupe of AD groups attached and also added a dynamic role with condition such that if a person has particular manager level then those AD groups are attached to the AD account and added the dynamic role check schedule to the Dynamic role created. 

Is it possible to disable or hold the business role for couple of days and re-enable. I tried to remove the schedule but still as the condition matches AD groups are mapped to the account. I don't want to delete the business roles as I need to follow this process for around 100 business roles. 

Thank you.

 

  • 0 over 7 years ago
    Hi Rahul,

    I think the only way you could do this would be to update the condition so that it doesn't evaluate for a specific time period, ie using start or entry date, for example. Only include users whose start date is greater than some date in the future. Alternately, look at using a particular attribute that users must have in order to be included?

    Trevor
  • 0 over 7 years ago
    Hi Trevor,

    Thank you for the information this helps.

    Sorry I forgot to mention in the original question . We have been using that birth right and some accounts already assigned to that business role . By changing the code of the dynamic role will it effect the users that were assigned previously?

    Because I don't want to remove any birthrights which are already assigned . I only want to stop the birth right for new accounts which will be added in next couple of days and make no harm to the existing ones.

    Thank you.
  • 0 over 7 years ago

    When I am reading your use-case right, I would turn your solution around. Assuming that you do not want to inherit permissions (groups) for new accounts, why don't you set the flag "No inheritance" on either the person or the flag "Groups can be inherited" on each individual accounts.

    In that case, your dynamic role membership can be calculated as usual but no group-membership will be added until you change the flag.

    HTH

  • 0 over 7 years ago
    I haven't tried this but could you temporarily add a condition to the dynamic check that only allows users who are in the role that the dynamic check is for? This should mean that no new users are added while that condition is included and the current users are retained within the group then when you want new users to be added, remove that part of the condition. 1=0 if you don't care about losing the users currently in the group.