Hi,
We are using One Identity Manager OnDemand - Starling Edition version 9.2.1.
We are implementing an attestation campaign for SAP roles assigned to SAP accounts.
We would like to attest the roles that are assigned:
- directly,
- via request from IT Shop,
but not the roles that are assigned via dynamic role.
We see that the roles assigned via IT Shop request and via dynamic role both have XOrigin = 2.
Is there a way in which we can distinguish the roles assigned via IT Shop from the ones assigned via dynamic role?
We need to exclude the latter from the attestation campaign.
Thanks,
Michaela