Rule-based Access De-provisioning

It is the most important and yet simple task that is missing almost everywhere. Finding terminated employees is not hard in the system. Knowing what to remove is also not hard. So, the only thing missing was a tool that can do it.

That’s where this bolt-on comes in the play. It allows you to define rules around de-provisioning access for users that shouldn’t retain it anymore. Below is the complete list of objects that can be Deprovisioned using this bolt-on:

De-provisioning

1. Remove roles
2. Lock account
3. Remove Row security PL
4. Remove Primary PL
5. Remove Process profile PL
6. Remove Navigator PL
7. Remove Email ID
8. Remove Employee ID
9. Remove SA SACR (in CS version of this bolt-on)
10. Remove SF SACR (in CS version of this bolt-on)