Are there any setbacks for having active members in disabled roles in IMG/Aveksa?
3 years ago
Originally Published: 2015-05-22
Article Number
000067281
Applies To
RSA Product Set: Identity Management and Governance (IMG), Aveksa
Resolution
There should not be any setbacks from having an active user as a member of a disabled role.  Any access granted via the role is indirect and will not be revoked by setting the role to inactive.

Also, the access cannot be revoked through reviews and whatnot, since the access is indirect.  You should be able to revoke this access via a regular change request, unless the option is unavailable due to it being indirect.  This would not affect any change requests that have already been generated.
Don't see what you're looking for?