Hello,
We have implemented ARM with workflow for approvals but restrictions on the functional area. A request is only permitted to assign / view roles for the functional area defined in the authorisations
The requestor should only be able to assign roles to users from their site (UserGroup) but from what we can see when the request is submitted the user can select any user in the system and submit the request . If approved at the seconf level the roles are auto provisioned without restriction. Is it possible to restrict a requestor to a specific user group or group of users.
Regards
Mark