Roche RIS Feedback Portal

To implement a user profile restriction that fixes the profile of the dedicated ROCHE user account to SERVICE (making it immutable) and, concurrently, removes the SERVICE profile option from the profile selector for all other users within the Navify POC Operations application.

Currently, the application allows for the possibility of changing the assigned user profile for the specific "ROCHE" user account. It also allows the "SERVICE" profile to be assigned to other, non-"ROCHE" users. This improvement seeks to enforce a stricter security and permission structure to guarantee operational integrity and role compliance:

1. Immutability of the 'ROCHE' Profile: The specific user account identified as ROCHE (or the associated service account) must have its user profile permanently locked and fixed to the value SERVICE. No administrator or user with user management rights should be able to modify, select, or change this profile to any other value.

2. Exclusivity of the 'SERVICE' Profile: For all other users within the application (i.e., any user account distinct from "ROCHE"), the SERVICE profile must be removed from the list of available options in the user management interface. This ensures that the functionality and permissions associated with the Service role are exclusive and cannot be assigned accidentally or intentionally to unauthorized local personnel.

The expected outcome is that the 'SERVICE' profile becomes an invisible system option, exclusively and permanently associated with the 'ROCHE' account.