Role Group Overrides
App showcase
Grant temporary, tracked group-based access when authoritative HR data does not capture the required role.
Role Group Overrides lets IT assign ad-hoc, group-based roles directly to a user while keeping every assignment visible, controlled, and eligible for automatic expiry.
When to use itDirect link to When to use it
A cross-functional project requires temporary access that is not reflected in the employee’s authoritative HR role. Adding groups manually provides no consistent way to document, review, or remove that access later.
How it helpsDirect link to How it helps
- Assigns the required group-based role without waiting for an HR update.
- Records assignment context such as requester, purpose, note, and expiry date.
- Provides one place to monitor active overrides and remove access when it expires.
Temporary access flowDirect link to Temporary access flow
Request
Identify the access gapA temporary assignment is needed beyond the HR-driven role
Assign
Select user and role groupRecord the purpose, note, and expiry date
Monitor
Review active overridesKeep the exception visible while access is needed
Remove
End temporary accessRemove the override at expiry or when the need ends
OutcomeDirect link to Outcome
Users receive necessary access promptly, while IT retains visibility and an auditable, time-bound process for exceptions.