Access profile A contains entitlements 1 and 2 on source X and its approval process specifies that requests must be approved by the requester's manager. Role B contains access profile A, and role B has membership matching criteria based on Identity Attribute Job Title equals Business Analyst. Ary changes jobs in your org, and her job title is now business analysts. What happens next?
1) Mary's access does not immediately change - she must manually request entitlement 1 and 2 to receive access profile A
2) Mary's entitlements received an approval item to approve adding entitlements 1 and 2 to Mary's source X account
3) Role B is assigned to Mary and IdentityNow starts the provisioning process to add entitlements 1 and 2 to Mary's source X account. Approval is not required.