Access outside role

Identity Security Cloud (ISC) ISC Discussion and Questions
,
3

This may be related to this post which has an open IDEA.

If you just want the report and not handled through IDN, you may need to script this with the APIs. Here is how this could be done:

  1. Get All Users
  2. For each user,
    a. Get all of their entitlements (You can filter on a source or take them all) - List A
    b. Get all of their Roles, for each role, get all of the access profiles and for each access profile get all of the entitlements - List B
    c. Subtract List B from List A to have the entitlements that are not provisioned through Roles

Endpoints:
/v3/search
/v3/roles
/v3/access-profiles

1 Like