Fix roles for external users with possible intentional internal role assignments

Review and fix roles for external users that may have intentional internal role assignments.

Before you begin

Role required: admin

About this task

It is recommended that you do not assign internal roles to external users. Use this procedure to review and fix the contacts and consumers that may have the following role assignments:

• snc_internal role and one or more additional internal roles
• snc_internal role and one or more additional internal and external roles

Note:

This guided setup task uses scheduled jobs to identify and fix role assignments. When fixing role assignments, the scheduled job fixes 3000 users at a time. If there are more than 3000 users in this group, change the configuration of the job so that it runs periodically.

Procedure

1. Navigate to All > Customer Service > Administration > Guided Setup and click Get Started.
2. In the Fix External User Role Assignment category, click Get Started and then click External users with possible intentional internal role assignments.
3. Run the scheduled job to tag users that may have intentional user role assignments.
   Users are tagged with the Ext-user-intentional tag.
4. Review the list of tagged users and remove the tag from any users for which you do not need to fix role assignments.
   If necessary, configure the list to display the Tag column.
5. Run the scheduled job to fix the role assignments for the users with the Ext-user-intentional tag.
   This scheduled job makes the following changes:

   • For users with the snc_internal role and one or more additional internal roles, it removes the snc_internal role and all other internal roles, and adds snc_external role.
   • For users with the snc_internal role and one or more additional internal and external roles, it removes the snc_internal role and all other internal roles.

   This scheduled job runs all of the delete business rules on the User Role [sys_user_has_role] table.