Access Review – PreChecked Entitlements for Revocation

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

IIQ 8.4P2

Share all details about your problem, including any error messages you may have received.

Hi,

Does anyone know how to configure the below in Access Reviews?

  1. All entitlements are to be pre-checked (selected) for revocation by default.
  2. A notification is sent to the new manager with instructions that they must uncheck any access the employee should retain.

Thanks in Advance.

Swetha.

2

HI @Swetha.kaipa ,

There’s actually a simpler alternative that might suit your use case: Automatic Closing of certification campaigns.

With this feature, IdentityIQ can automatically approve or revoke items that haven’t been reviewed by the time the campaign reaches its deadline. This behavior is configurable and doesn’t require any customization to the default approval/revocation UI logic.

Using automatic closing avoids the need to override the standard behavior of the certification UI (like modifying the approve/revoke buttons), which it would likely require a custom plugin or deeper UI customization.

Hope this helps clarify your options!

1 Like
3

Hello @Swetha.kaipa,

For the first question:
When you review the Lifecycle step of the certification configuration, you can use the End Period Enter Rule. This rule automatically sets entitlements for revocation at the end of the certification period if no action is taken by the certifiers.

For the second question:
Under the Notifications step, you can customize the notification content to include instructions for the manager, such as asking them to uncheck any access the user should retain.

image
image1114×455 20.5 KB

Let me know if this information is helpful.

Thanks, Raju

4

Hi @angelborrego , @santhirajumunganda ,
Thank you for your inputs .
The Requirement here is to mark all the items as “Revoked” by the time the certifier receives it , so that the Certifier will actually take a look at the items before taking action (just in case the certifier doesn’t look at the items and just mark all as approve) .
so , even before the active period we need to mark all the items as “Revoked” and then communication will be sent “is decision is not changed , then all will be revoked.” .

Swetha.