Which type of roles provision automatically during aggregation?

Birthright roles are automatically provisioned during aggregation because they are predefined roles assigned to users based on their attributes at the time of onboarding. These roles typically correspond to an individual's position, department, or other similar criteria, and they ensure that users have the necessary access rights as soon as they are integrated into the system. This automated provision process enhances operational efficiency and ensures that access is granted consistently and promptly.

Request-based roles, on the other hand, require user initiation for access. These roles must be requested by users and typically undergo an approval process before they are provisioned; therefore, they are not automatically assigned during aggregation. Additionally, roles without attributes lack the necessary specifications for automatic provisioning, as they do not correspond to identifiable user characteristics that dictate access rights.

In summary, birthright roles are designed to be assigned automatically based on user attributes, ensuring that individuals have immediate access to the resources essential for their roles within the organization.