Manage roles with SCIM
Add, update, and delete roles using SCIM
Adding roles to your organization
If your organization has a local role with the same name as the role you're pushing from your identity provider, a new, separate role with the same name will be created in your Modern Treasury organization. The newly created directory synced role will have a lock symbol.
Directory synced role names are unique - this is enforced by your identity provider.
Updating role details
Once SCIM and directory sync is configured for Modern Treasury, updates to roles must be done in your identity provider. You will not be able to edit role name, description, or users for any roles (directory synced or local).
Deleting roles from your organization
Delete roles with caution
Deleting roles will also affect the role's associated approval rules and notification groups. This applies to both directory synced and local roles.
Effect on approval rules
Approval rules for Payments, External Accounts, and Cases require review from assigned roles. Deleting or de-provisioning a role will have the following effect:
- For approval rules requiring approval from only the deleted role, the rule will be automatically deleted.
- For approval rules requiring approval from more than just the deleted role, the rule will not be deleted but the deleted role will be removed from the approvers list.
Effect on notification groups
Deleted roles will be automatically removed from notification groups.
Cleaning up local roles
Once you have set up directory sync, we recommend deleting local roles that are not managed by your identity provider.
Before deleting local roles with a directory synced copy, add the directory synced role to the local role's approval rules and notification groups.
To delete a local role, go into the role's edit view and click on the Delete Role
button at the bottom of the page. Confirm the deletion in the modal.
Updated 10 months ago