Good day! I'm interested in the ability of ONEIM to change XOrigin for assigned groups in the background.
For example, a user has an Active Directory group that he obtained through the IT Shop.
Then this group got into the business role in which this user participates. It turns out that now it has become a new group for the user.
Since he previously received it through the IT Shop, IDM should stop perceiving it as such and, in the background, change it as assigned only through the business role and make a cancellation for the IT Shop request. In other words, the group should not be considered assigned through either the IT Shop or the Business Role.
Business role is given priority. Is it possible to somehow implement it?
All this leads to a conversation about whether it is realistic to transfer all groups assigned as Direct Assignment to Indirect Assignment (with XOrigins, as if they were assigned through the IT Shop)?
And for those appointed through It Shop and simultaneously through BR (with XOrigin, only for Through Business Role).
By doing so, we would like to avoid cross-assignment.
When groups can be assigned as Direct, Indirect, Dynamics role, etc. Thanks for any information!
