Application vs Roles

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,

When a user requests access to the AD group called Group A, another delimited entitlement needs to be triggered simultaneously. To facilitate this, we have created roles that map both the AD group and the delimited entitlement. Both requests will go through an approval process, and upon completion, the AD provision and the delimited entitlement will create a task manager.

I have tested the system, and it is working fine. The issue lies in the fact that our users are accustomed to selecting the application under the request center. However, for this specific scenario, we need all users to select roles instead. This would require retraining the users and updating all the existing training materials, which the client is not willing to do.

Is there a way for users to select an AD group in request center under application, submit it, and trigger the associated delimited entitlements?

2

If you have a limited Ents to manage then you could have Roles created with membership criteria :
Criteria group: Type - Entitlement, Source : AD equals Entitlement: “respective AD Entitlement” Assign the access (Delimeted file source ent). This way delimeted file ents prov will get trigger automatically & task should be opened.

3

you can create a role which can auto assign the associated delimited entitlements based on the assignment criteria that user has a AD group .
And then this ADgroup can be shown in application tab.

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.