I have some questions regarding roles:
1. When I create a new external Role in IDM (using v6.5) and dynamically add members, I can see them in Role Members tab (as expected) but I can also see them in Authorization Role Members tab. Why does an external role have Authorization members? I thought this was only needed for internal roles?
2. My second question is around how to implement nested roles or groups in IDM. Let’s say I have a role for “HR” and a role for “Finance” (each with their own separate assignments) – I would like a common role “FEC” where the members for FEC are the HR and Finance roles – and FEC would then have the birth-right assignments that are common for both.