Hello,
We are using One Identity Manager 9.3 and noticed that, even with the manager role, a manager is unable to revoke access that has already been approved and assigned to their subordinates via the Web Portal.
Current scenario:
- The manager is able to revoke their own access through Request History > Unsubscribe.
- However, when viewing the request history of subordinates, the revoke options (such as Unsubscribe or Cancel Request) are not available.
- We also tested through the My Direct Reports section, but it appears to only allow editing of personal identity details.
Question:
Is this limitation expected for the default manager role?
Is there a way to enable the revoke functionality so that managers can directly cancel or unsubscribe assigned access for their subordinates through the Web Portal?
If this requires adjusting permissions in the Designer (via the Permissions Editor) or customizing the portal, any guidance would be appreciated.
Thank you.