Currently, customer who have SAML integration with Netreo can assign user privileges based on the access roles in the SAML response. The issue is that when a user already exists with a specific role, changing the role in the SAML response will not change the privilege level in Netreo automatically. We need to remove the user from Netreo and then allow SAML to re-add the user with the new permissions.
User privileges should be automatically elevated or demoted if their role changes in SAML.