Admin account for privilege access

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.2

Share all details related to your problem, including any error messages you may have received.

Hello ā€“ I have a requirement, managers from a specific application has two types of account admin account and normal user account. When the managers request for an access IIQ gives an option to select which account to use. We need to make sure admin account is only used for accessing privileged access. Normal user account should not be used to request access. So can we eliminate the user selecting accounts for particular access?

2

The best and easiest way would be to use Role instead of Entitlement assignement - then you can control to which account you assign IT Role via accountSelector Rule

1 Like
3

Hello @prasanth9181 ,

We have a feature in IdentityIQ called account selector rule.

Account selection rules can be defined on a role that can contain entitlements that can be provisioned from profiles to automate the selection of applicable accounts.
Account selector rule determines which account to assign the access.

2 Likes
4

Thanks,

Can we use this account selection rule for entitlement instead of roles?

5

We can use account selector rule in IT Role, not in entitlements.

3 Likes
6

Nope but you can use quite old engine available in iiq and for each entitlement generate role with type entitlement and then set account selector on it.

But still Iā€™d recommend using standard roles.

1 Like
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.