Hello! Please consider endorsing our request!
Summary:
Activation/deactivation of user accounts at our organization is automated. When a user with Admin/Instructor/Author/Designer/Manager/CourseManager permissions is disabled, they retain those permissions upon disable. If the user is rehired into a different position, their account is automatically activated and Admin access is available (inappropriately).
Workaround:
Manual audit of additional permissions periodically. This includes running an ad hoc report, reviewing with several managers, and manual removal of permissions per user.
Proposed Solution:
Automatic removal of any permissions in addition to Learner upon disable. if additional permissions are needed when user is reactivated, a request should be entered and reapproved.
Link to ER104397
or
https://mingle-portal.us2.prd3.inforcloudsuite.com/v2/CONCIERGE_PRD/?LogicalId=lid://infor.cxp.1&Tab=ERS&ERId=104397
