When modeling roles, you can easily verify this using Role Simulation in SF.
It is very valuable to have Role Simulation function after IAM (No matter which GUI), just like the User simulation option we have now. In addition, it would be useful to have ‘User Group Simulation’ option.
This enables our testers to efficiently test Role settings on Test Environment.
Otherwise you are forced to use User Simulation and when there are multiple user groups or roles linked to a Test_user, you’ll need to assign / revoke user groups and roles repeatedly in order to test just one Role or one User Group.
