We use rapid setup to handle mover case. So far, so good. But, if we want to remove the requested entitlements/roles as well not just the assigned roles, how can we accomplish that? Should we inspect the mover business process and at a specific point we should gather all the entitlements the user has and create a provision plan to remove it? Is it the correct way/best practise, or is there something we’ve missed?
To achieve this, it’s necessary to introduce an additional step within the workflow. This step should involve the calculation of all assigned roles, add them to the plan to remove them.