Hi,
We have 2 roles: RoleA for Employees and RoleB for Contractors and when users get granted with this role, Active Directory Access policy kicks in and assigns 'AD User' resource along with other resources too.
Now, we have a requirement to assign an AD group as birth right only to employees. But, if i include this in the AD access policy it will get added when both RoleA and RoleB are assigned to the users.
Is there anyway, we can assign the group only when RoleA is granted to users ?
We are on 11gR2Ps3 BP17.
Any suggestion or inputs.
Thanks in advance.