Hi All,
We have a common entitlement included in two different access profiles, and both access profiles were assigned to a user. When we attempted to remove one access profile, both access profiles were removed. Can anyone please let me know if this is the expected behavior in SailPoint Identity Now?
That is what would be expected. The user no longer has the access profile assigned because they do not have all the entitlements linked to it assigned. I often advise people against including the same entitlement in multiple access profiles because of this.
Hi Mark, Does the same logic apply when requesting an access profile? Specifically, if I request one access profile, will the user get access profiles which are common entitlements between requested access profile? If so, what is the best practice to avoid these?