In Identity Governance (2.5 / 3.0), it is currently possible to independently enable or disable comment requirements for review items that are Kept or Denied. We would like to allow for more complex logic that requires reviewers to comment on items that they select Keep on only if the user's Technical Role or permission is not approved per the user's Business Role. If the user's role is approved by the Business Role, then no comment would be required when selecting Keep. This would allow comments when reviewers Keep previously issued exception access, but not require them to comment on all review items.

Comments