Broaden Health Assessment Type User Group Check

The base product delivers many user groups that act as a type of library of system services. One of the main user groups that acts as a library of service is ALL_SERVICES.  However, many of the other base delivered user groups act as a library of services, but for targeted functionality. The product strongly advises against granting users access to any of these user groups in production. Besides giving the users broad access when linked to any of these user groups, the product includes application services for new features and functions into these user groups in a new release. This means that users linked to those groups get access to the new features without having a chance to review their purpose and choose to opt into the new functionality.  

The user groups may be used in a development or in a testing environment as an easy way for developers and testers to have access to features and functions for testing.  

Previously, a health assessment type was delivered to report feedback when a user was found to be linked to ALL_SERVICES. The assessment type has now been expanded to check for users linked to any base delivered user group.  

NOTE: For cloud customers, this check does not include user groups delivered by the Cloud Service Foundation product layer as they are not considered a 'library of services', but rather they are 'functional' user groups that define the services that are appropriate for a type of user role in the system.

Expanding the health check for users linked to base delivered user groups ensures that clients are reviewing their user access and that they are linked only to custom defined user groups.

Steps to enable and configure

You don't need to do anything to enable this feature.