We have a class of Employee that is assigned a business role that has no resources allocated but on occasion this Employee requests and is granted through an Exception policy access to our systems. Currently we have been manually assigning these necessary resources to this person via Manager. When their business role changes from one that must be manually assigned the resource to one that causes an indirect resource assignment D1IM handles this by making the resource both direct and indirectly assigned.
Q: How can I remove the directly assigned aspect so that my security trimming processes clean up the Employee appropriately? Can I set viInherite in PersonHasResourceTotal table to an appropriate value or is there a better way?
