Access Request Remove Visibility to Roles user is already assigned

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

IIQ 8.4

Hi! Currently trying to configure the SelfService page. Mainly using Quicklinks to do so. I am reaching a satisfying point, however! I am not being able to disable visibility to roles the user is already assigned! User can view it, and only understands that the role is already assigned once he/she presses the role and gets a yellow warning message “the item you are trying to select is already assigned”.

Any help? Thanks in advance

2

hi @miguelgrilo

You can hide roles already assigned to a user in the SelfService Quicklink by using an Identity Selector Rule on the Quicklink population. This rule filters out roles that the requestee already has, so they won’t appear in the selection list.

For extra control, you can also use a Before Provisioning Rule to remove already assigned roles from the provisioning plan—just in case something slips through.

3

Hi Shaik! First of all, thanks for the reply.

I am using IIQ 8.4, I don’t see any Identity Selector Rule can you try and be more explicit given that I am using IIQ 8.4?

Is it in Quicklink Populations > Self Service > Configuration > Membership? (…) > Configuration > Who can members request for? (…) > Configuration > What can member request?

Thanks in advance

4

hi @miguelgrilo

Under membership> change it to rule

image
image1240×441 8.83 KB

Click on Edit Rule> RuleType: IdentitySelector

Hope this helps!

5

Hi Shaik. Not clear yet, sorry!

I need to give the rule a name, and need to give it source code? I never coded rules… I simply want to hide accesses a user already has! Why do I need to make a rule for this?

I would expect not to create any code for this, in the future… nevertheless how can I achieve this with the rule?

Thanks in advance, and thanks for the quick replies!

6

hi @miguelgrilo

I totally get it! In many cases, you don’t need a rule SailPoint can hide already-assigned accesses through configuration.

But if that’s not working in your setup, a small rule helps apply that logic dynamically.

7

But can you please provide me the way to do it? Ideally the configuration UI way? If this is not possible, how should I configure that rule?