Provisioning policies
A provisioning policy grants entitlement to accounts on managed services for set of roles.
A provisioning policy governs roles and users in the entire organization, regardless of the association of the policy with the business unit in the organization tree. The policy governs only services that are associated the same business unit or sub tree of the business unit with which the policy is associated. The provisioning policy must be at the same level or higher than the related service.
A role that is referenced in the provisioning policy can be anywhere in the tree of the organization. Any user can be manually attached to the role.
Parent topic: Scope of governing entities in the organization tree