How can I set the state to pending approval on the sys_user_has_role table?

[thegreatandmigh]

A few versions ago, I was able to jump into the sys_user_has_role table and set state=pending approval. Today, I am having trouble setting the state for roles that are inherited=true.

I have adjusted a couple OOTB ACLs and even created a couple of my own. I tried ACLs on the state field as well as the inherited field.

Any ideas?

[ruzzty06]

Hi, may I know what's your use case for this?

[User186043]

I don't know the use case for this, but I'm assuming want to have a request for role process. This would be better handled by using a standard service request with a req_item for each role being requested. Manage the approval process there with workflow and script the creation of the sys_user_has_role record following successful approval. This is because you should see it that once that sys_user_has_role record is created, that the user has that role, don't think of that record as being applied conditionally; a user either has the role or doesn't, eg. has the record or doesn't.

I have done this in the past at a previous organisation where there was one 'request role' catalogue request, where business roles were setup, or you could manually enter a system role. The roles would then receive approval and/or administrator approval based on workflow of user's manager and role being requested. A little bit of work building the underlying infrastructure for it, and the workflow, but once it's done, it was mostly maintained by the business.