Certification for Business Roles

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

IdentityIQ 8.4

Share all details about your problem, including any error messages you may have received.

*Dear Sailors,
We have a requirement as we need to certify the RBAC business roles, and I would like clarification on the following two points:

  1. How does business-role removal work, and can those roles be reassigned during an identity refresh if they match the role assignment criteria? If so, how does that process occur? How does SailPoint stops that from happening?
  2. Revoking business roles, as part of the certification process, works correctly for new users created by SailPoint, but not for existing users who already have entitlements and were assigned the role via the role assignment criteria. How can we resolve this issue, or is our testing approach not properly designed? *