What is a one sentence summary of your feature request?
Require approval for role removal requests
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
Access to the “Edit Permissions” menu allows users to request additions or removals of roles, as well as role bans.
An addition request is properly subject to approval by the role manager.
However, a removal or ban request is not subject to any approval process.
For our company, this is a major anomaly, although it wasn’t seen that way by the support team, who asked us to submit a feature request. This message is intended for that purpose.
Are other clients aware of this behavior?
If this also poses a security issue for you, please vote!
Thank you to others who find this requirement relevant as well.
And for clients who find this normal, I would like you to explain why in this discussion.
For your information, here is the response:
NIM’s Approval Workflow applies only to role assignment additions. Deletions are processed immediately and do not pass through Role Review. The ApprovalWorkflowType field on a role controls the validations required when assigning it, but there is no equivalent mechanism for revocations, and no configuration option is available to enable one.
If you require Role Review to also apply to deletions—mirroring the approval flow used for additions—this would need to be submitted as a feature request.
Thank you for your understanding.
How do you currently solve the challenges you have by not having this feature?
There is no solution. We hope that users who have access to “Edit Permissions” (all employees and service providers managing certain roles) will not realize that they can delete any role (configured with validation) for anyone.