Hi Steffi,
That certainly is a thought, I could just create a Portal role, and then have a role for all other SAP System assignments and just drop that role.
I'll have to think about this. Thanks for your help!
Regards,
Matt
PS - Another thought came to me as I was replying to Jerry... We could conceivably drop all the SAP Roles and then add a new role for "Post Employment Portal Access" or something like that in IDM. That would also be excellent for reporting purposes.