I want to request a role for an application in IIQ for account creation. This role would be used multiple times for account creation operation by the user for same application. This is coz the application does not support modify operation. So, if I request the role 5 times for the same app, I should have 5 new accounts created for the same application in the same cube.
Once the role is requested, I do not want to assign this role as an assigned role to the identity.
Please confirm if this can be achieved in IIQ?
In the LCM workflow or after provisioning rule, add a step to remove the assigned role from the identity. So, the account will stay but the entitlement will be removed so it can be requested again.
Yes, IIQ supports this use case. By allowing multiple accounts and either using a transient requestable role or a custom LCM workflow, you can create multiple accounts for the same application without permanently assigning the role to the identity
In your spare time, please do not forget to mark responses as solutions. This benefits other users who might have the same question in the future and are seeking additional resources in the community.