Access Requests - but AD groups can’t have more than 100 members

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Background:
Access requests to AD groups is currently enabled and working.

I have been advised new AD groups have been created and should be requestable through ISC but these AD groups cannot allow any more than 250 users in them.

My Question:
Is it possible in ISC, to set a capacity limit to an AD group and fail or reject the request if the limit is reached?

2

Hello,

I’m not sure this is possible within ISC directly but an idea would be to configure a workflow with PTA and query AD.

All access requests for the given entitlements would have to trigger this workflow.

You would then for each request query the AD to check if the group has <=250 members

If yes = provision

If no = cancel request.