Can't revoke role through a certification campaign

Dear all,

One of our users complained about not being able to revoke a role through a certification campaign. The only options available are “Aknowledge” and “Reassign”.

The role is marked as non requestable, which, I guess, is an automatic role.

Can you confirm that automatic roles can’t be revoked through a certification campaign? If so, what’s the purpose of reassigning the task?

Thank you for your answer.

Best,

Any roles that are assigned through automated assignment criteria will appear in the certification but are only able to be acknowledged. As far as why are these roles included, I would say it is for awareness. Although we may use roles for services such as Active Directory/Email that are common to all users, we can use roles with membership criteria to indicate access that the say finance accounting team has. If a reviewer was looking for an accountant and their finance access was not there, the certification would look incomplete.

Understanding Certifications - SailPoint Identity Services

3 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.