Role hierarchy change enforcement

The people affected by the role hierarchy change operation are evaluated against all applicable policies in the system. Evaluation includes policies that are not related to any of the parent roles. As a result, we might find accounts not related to the role hierarchy change that is being enforced. For example, we might have a group of new users from an HR feed that did not have workflow enabled. This group of people is entitled to accounts on Service A automatically, but the accounts are not created because the HR feed bypassed policy evaluation. A role hierarchy change operation might affect the same group of users so that they are provisioned to Service B. Accounts on both Service A and Service B are created.

Parent topic: Role administration