Blocked actions
Some items may have actions blocked:
If the item is revoked, and you can’t undo the revoke or certify it, the item is dependent on something else that has been revoked.
For example, if an account was revoked, all of its group memberships are considered its dependents and will also be revoked. The group memberships can be unrevoked by unrevoking the account.
If SoD rule violations are also in the review, all of the user’s entitlements (with the exception of the profile) will be blocked. This is indicated by a warning icon. The violation will have to be certified or resolved before you can certify the user’s remaining entitlements.
If there’s no warning sign, the item is a required role member. When an entitlement is assigned to a user as a requirement of a role, it cannot be reviewed independently of the role. This applies even when the role is not part of the review. Entitlements that are optional can be reviewed separately from a role.
Depending on the CERT HIDE REQ ROLE MEMBERS setting (Manage the system >Modules >Manage certification process (CERT) module) required role members may not be displayed at all.
If an entitlement was deleted or removed from a user after being listed in an active certification campaign, it is represented by the removal of all buttons, crossed-out text, and a note stating that the item has been deleted.