Hi All,

I'm having some difficulty defining an access role where a user can only remove authorizations.

Specifically, an HR employee is responsible for performing a final check and must be able to remove authorizations, bot project input and attendance, but not authorize them. The authorization action is reserved for another role.

The deletion of the input is also not needed - the person only needs to remove the authorizations.

Does anyone have suggestions on how we can define this kind of role in the cloud environment?

Thanks in advance!