Access Request Recommendations not visible in tenant

[nikhlesh21 (Nikhlesh Sheoran)]

HI All,

I was looking for the Access Requests Recommendations while requesting access for someone else or myself although I don’t see Recommendations tab in Request Center.

I checked the documentation but could not find anything helpful. I have checked the System settings as well to see if any options to enable the Access Request recommendations. Also, Roles i am expecting to be in recommend are requestable and as per configurations location is the restriction attribute (tried changing it to manager as well) for recommendations but still not able to see the recommendations. Even /ai-access-request-recommendations API is not giving any response (200 OK).

Any insights on this would be appreciated.

Thank You.

[vishal_kejriwal1 (Vishal Kejriwal)]

I am not aware of any such feature exists in ISC , i think this exists in IIQ 8.5

[nikhlesh21 (Nikhlesh Sheoran)]

I think it exist since we have documentation and APIs available.

Access Recommendations - SailPoint Identity Services

get-access-request-recommendations | SailPoint Developer Community

[pattabhi (Pattabhi Nandarapu)]

I found below article regarding enhancement.

Enhancement: Access Request Recommendations for Entitlements

Description Access Request Recommendations now include individual entitlements, in addition to roles or access profiles. Problem Until now, users could be guided through the access request process with recommendations for roles and access profiles to align their access with their teammates. However, organizations that relied heavily on individual entitlements and had not yet invested in a robust role model were missing out. Solution SailPoint has added entitlement recommendations, which analyz…

[nikhlesh21 (Nikhlesh Sheoran)]

Yes, I saw this but this is regarding entitlements to be added in recommendations although Roles and AP are already there so I was hoping for Roles in the recommendation tab but unfortunately not able to figure out this.

[jennifer_mitchell]

Current functionality for access requests recommendations only supports (in our UI) recommendations for self. You can call the API with another identity’s ID (if you are using an admin token) and see recommendations that are available for them.

If we have not detected a pattern of access across your org that allows us to surface recommendations for a given user, you will get no recommendations.

Please refer to Access Recommendations - SailPoint Identity Services for more information on the access request recommendation functionality.

[nikhlesh21 (Nikhlesh Sheoran)]

@jennifer_mitchell

Thanks for the information, actually we have given a Role access to users with a specific location and tried using API to get recommendation for user with same location but still I don’t get anything. I think it should detect the pattern as location is the restrictionAttribute for recommendations.

@jennifer_mitchell

Please refer to Access Recommendations - SailPoint Identity Services for more information on the access request recommendation functionality.

I went through the documentation few times, but it does not mention about what you have explained, and this is very useful information. Just to mention this is Demo Partner tenant not sure if anything due to the tenant.

Thank you.

[jennifer_mitchell]

To be clear, the role and access profile recommendations also rely on the compared identities sharing a manager. Location is a further grouping attribute within the team (so, for example, if there are access requirements for HQ personnel vs. for remote, that pattern can be seen and the access similarities can reach the expected thresholds to drive recommendations).

Also, as you mention this is a demo partner tenant, it is common that non-prod tenants might not have enough data with pattern similarities to generate recommendations. Not saying that is always the case - just that it can be a factor.