---
title: "Optimize user role assignment"
slug: "optimize-user-role-assignment"
tags: ["Task", "Security and Compliance Studio", "SCS"]
updated: 2026-08-18T08:50:06Z
published: 2026-08-18T08:50:06Z
canonical: "docs.staedean.com/optimize-user-role-assignment"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.staedean.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Optimize user role assignment

The **Suggested roles** section shows the security roles and licenses that a selected user needs, based on their actual use of {{variable.D365-short}}. Compare these suggestions with the roles that are currently allocated to the user.

If the suggested roles differ from the allocated roles, use **Raise security request** to request the role changes, without leaving this workspace.

### Steps

1. Click **User license optimization**.
2. In the **User license** section, select a user.

The **Suggested roles** section shows the recommended roles for the selected user. Fields in this section:

| Field | Description |
| --- | --- |
| Reference | The name of the suggested security role or license. |
| Allocated | Indicates whether the role is already assigned to the user. |
| SKU Name | The Microsoft license SKU associated with the suggestion. |
| Last refreshed | The date and time the suggestion was last calculated by the **User license optimization** batch job. |
3. Sub-task: Raise a security request.
  1. **Raise security request** is only available for users with permission to raise security requests.

Click **Raise security request**.
  2. Security and Compliance Studio compares the suggested roles with the roles allocated to the selected user, and creates one or both of these security requests:
    - A request to assign the roles that are suggested but not yet allocated.
    - A request to remove the roles that are allocated but no longer suggested. Note that these roles are not shown in the **Suggested roles** section.
  3. A confirmation message shows the ID of each created security request.

> [!NOTE]
> Note
> 
> - The created security requests follow the standard security request approval process. See also: [Manage security requests](/data-management/docs/manage-security-requests).
> - If the suggested roles already match the allocated roles, no security request is created.

## Related

- [Analyze user role and license assignment](/analyze-user-role-and-license-assignment.md)
- [Optimize license assignment](/optimize-license-assignment.md)
- [Manage security requests](/manage-security-requests.md)
- [Optimize roles and licenses](/optimize-roles-and-licenses.md)