I am looking for a feature to be applied into Identity Management project.
When I provision an user to the SAP ERP, I request single and parent roles, then the user account is created into the SAP properly, i.e, the user is created and the roles (single, parent and derive roles) are added to user profile.
The problem is: When I do a reconciliation, all the roles (single, parent and derive roles) are reconcilied.
My question: Is there any way, by the SAP features, where I can do some filter to get only Single and Parent roles?
Are thoses roles treated in the different entries in the SAP?
For example: With the entry 'AGR_NAME;ACTIVITYGROUPS;User Role' in my reconciliation process, I am able to get all the Roles. But this is not desirable behavior. I would like to get only the Single and Parent (without its child/derive roles).