Business role permission changes should be coordinated with application owners, both to ensure that the business role owner is using the correct application permission and to prevent a business role owner from granting permissions to an application without the application owner's knowledge. This review should be built into the standard workflow.

Comments