8.4
Aggregating Permission Objects:
Hi
I tried to aggregate the AD Folder Permissions via group aggregation in IdentityIQ, but those permissions are not visible.
I also wanted to know what is the difference between reading permissions objects via group aggregation and configuring unstructured targets in application configuration.
Thankyou!!
Hi
| Feature | Group Aggregation | Unstructured Targets |
|---|---|---|
| Source | AD group objects | Any external system or resource |
| Captures | Membership, group names | Permissions like folder-level ACLs |
| Auto discovery | Yes, via connector | No – you define or import |
| Use case | Standard entitlements | Fine-grained, contextual access |
| Governance support | Full | Yes (with effort) |
| Identity correlation | Direct | May need logic or rule |
| Example | CN=FinanceTeam | \Server\FinanceShare\Read |
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.