Capability through Requests/Roles

[rishavghoshacc (Rishav Ghosh)]

Hi all,

Is there a way to request a capability in IIQ?

Or a role that can be requested and the role gives a capability in SailPoint?

Thanks in advance.

[Arun-Kumar]

Hi @rishavghoshacc ,

In SailPoint IIQ, you can request a capability by using a role.

Assigning Capabilities using a Role

Capability Roles One of the lesser known options within IdentityIQ is assigning Capabilities usings Roles. Within most installations of IdentityIQ capabilities are manually assigned to either directly to Identities or using a workgroup. This works great for small and medium environments. As with only a few capabilities used is quite easy to proof who is allowed to have and has a particular capability. Using Capability Roles, where capabilities are are assigned to identities using roles, it is …

[rishavghoshacc (Rishav Ghosh)]

@Arun-Kumar - This does help but I can’t find the Capability role I created on the Manage User Access Page even when I made the role requestable.

Am I missing something?

[Arun-Kumar]

Hi @rishavghoshacc ,

Instead of creating a new role type, create a new business role. Within this business role, configure the “Granted IdentityIQ User Rights.” select the capability. You can find this newly created business role on the Manage User Access page, where it will assign the capability to the user.