Application onboarding and Certifications

[mcheek (Mark Cheek)]

In my experience, if you create an access item campaign for a specific access profile, any users assigned that access profile via birthright roles will not be visible in the certification, only users assigned the access profile directly.

See my topic on this. I ended up having to include the roles in the certification as well

Inclusion of Entitlements/APs assigned via Role in Campaigns

I was recently trying out the following scenario Role has the following Access Profiles Access Profile A Access Profile B Access Profile C I assigned a user this role via access request (the role has no membership criteria). I then created an access item certification campaign for Access Profile B. The user is not included in this campaign, assuming because the access profile is assigned by the role? Is this by design? If so, this is kind of disappointing because we have access that must b…