User Account Role Provisioning Option

Existing users both acquire and lose roles as specified by current role-provisioning rules. For example, users may request some roles for themselves and acquire others automatically. All provisioning changes are role requests that are processed by default.

You can control what happens to role requests by setting the User Account Role Provisioning option. Use the Manage Enterprise HCM Information task to set this option. This table describes the User Account Role Provisioning option values.

Value	Description
Both person and party users	Role provisioning and deprovisioning occur for both person and party users. This value is the default value.
Party users only	Role provisioning and deprovisioning occur for party users only. For person users, role requests are held in the LDAP requests table, where they're identified as suppressed. They're not processed.
None	For both person and party users, role requests are held in the LDAP requests table, where they're identified as suppressed. They're not processed.

Value

Description

Both person and party users

Role provisioning and deprovisioning occur for both person and party users.

This value is the default value.

Party users only

Role provisioning and deprovisioning occur for party users only.

For person users, role requests are held in the LDAP requests table, where they're identified as suppressed. They're not processed.

None

For both person and party users, role requests are held in the LDAP requests table, where they're identified as suppressed. They're not processed.

Note: When a user account is created, roles may be provisioned to it automatically based on current role-provisioning rules. This provisioning occurs because user accounts without roles are suspended automatically. Automatic creation of user accounts and the associated role provisioning are controlled by the User Account Creation option.