Unassign User Roles in ONESOURCE Determination - Enterprise Cloud

The permissions granted to a user when a user role is assigned can be unassigned by:
  • End dating the user role. When a role is end dated, the user configuration is maintained for audit and historical purposes.
  • Expiring the user role. When a role is expired, you select the expiration date for the role.
  • Removing the permission granted by the user role. When a permission is removed, you don't select an expiration date.

End Dating a User Role

To end date a user role:
  1. Select
    Tools
    ,
    Administration
    then
    Users and Roles
    .
  2. For the user you want to end date a user role for, select
    Edit
    in the
    Action
    column or select the name in the
    User
    column.
  3. Select the role type (
    ADMIN ACCESS
    ,
    STANDARD ACCESS
    , or
    INTEGRATIONS
    ) that includes the user role you want to end date.
  4. Enter the date the role will become (or became) inactive for the user in the
    End Date
    field. If you entered a date that is in the past, the switch becomes red and
    INACTIVE
    displays next to the user role.

Expiring a User Role

To expire a user role for a user:
  1. Select
    Tools
    ,
    Administration
    then
    Users and Roles
    .
  2. For the user you want to end date a user role for, select
    Edit
    in the
    Action
    column or select the name in the
    User
    column.
  3. Select the role type (
    ADMIN ACCESS
    ,
    STANDARD ACCESS
    , or
    INTEGRATIONS
    ) that includes the user role you want to expire.
  4. Select the switch to deactivate the role. When a role is deactivated, the switch is gray and a message displays for you to confirm whether you want to remove the role for the user.
  5. Select
    EXPIRE
    . The Expire pop-up window displays.
  6. Select
    EXPIRE
    .
  7. From the
    Expire on
    drop-down list, select the date for when the permissions granted by the user role will expire for the user. If you select On a specific day, the
    End Date
    field displays and is populated with today's date. You can change the end date to a date that is either in the past or the future, if necessary.
  8. Select
    EXPIRE
    set the expiration date. On the Users and Roles page, the expiration date displays in the
    End Date
    field. If you entered an end date that is in the past, the switch for the user role becomes red and
    INACTIVE
    displays next to the user role.

Removing the Permission Granted by a User Role

To remove the permission granted by a user role:
  1. Select
    Tools
    ,
    Administration
    then
    Users and Roles
    .
  2. For the user you want to end date a user role for, select
    Edit
    in the
    Action
    column or select the name in the
    User
    column.
  3. Select the role type (
    ADMIN ACCESS
    ,
    STANDARD ACCESS
    , or
    INTEGRATIONS
    ) that includes the user role you want to expire.
  4. Select the switch to deactivate the role. When a role is deactivated, the switch is gray and a message displays for you to confirm whether you want to remove the role for the user.
  5. Select
    REMOVE PERMISSION
    . A message displays for you to confirm whether you want to remove the permission.
  6. Select
    REMOVE PERMISSION
    . On the Users and Roles page, the switch as well as the Start Date and End Date fields are gray.