17.9 Editing Business Roles

Identity Governance allows you to edit business roles. If you edit a business role that has been approved, it is changed to a draft when you save your edits and then it must be re-approved. To edit a published business role, a new draft copy is made for editing so that the published role continues to be used in governance processes until the new draft is approved and published. You can also download business roles as JSON files using the bulk action menu. After editing, you can import the roles on the page that lists all business roles.

To edit a business role:

  1. Log in to Identity Governance as a Business Role or Global Administrator.

  2. Under Policy, select Business Roles.

  3. Select the business role you want to edit, then select Edit.

  4. (Optional) If the business role is published, on the top of the page, select Edit.

    NOTE:We recommend that you think through business role definitions and add all members and authorizations before publishing. If you need to make changes after publishing, keep in mind that business role detections compare your last published state with the current state and automatically generate grants and revocations if auto-grants and auto-revoke settings are enabled. Also, note that a business role's membership policy can include members from other published business roles, however, circular inclusions are not allowed.

    Identity Governance creates a draft of the business role for you to edit on the Draft tab.

  5. Make the appropriate changes to the business role.

    You can change the name, description, grace period, risk level, memberships, authorizations, owners, and administrators of the business role.

  6. Select Save to save the draft.

  7. (Conditional) Select Compare with published to compare the draft version with the published version of the business role to ensure that the changes are correct.

  8. (Conditional) If the business role approval policy requires approval, when the draft is ready for approval, select Submit for approval. If the business role approval policy does not require approval, the draft is automatically approved whenever you save your edits.

  9. After you approve a draft, select Publish to publish it.

When deleting a business role that has been published, Identity Governance archives the business role for reporting and auditing purposes.