Hi, I am trying to understand the exact governance behavior for Machine Accounts and Machine Identities / Application Identities in SailPoint Identity Security Cloud. I reviewed the following documentation: Working with Certifications: Working with Certifications - SailPoint Identity Security C…

Hello Isha, For MIS, the Application Identity / Machine Identity is mainly the governance container. In a Machine Accounts certification campaign , the reviewer is really reviewing the access tied to that application identity, mainly the entitlements coming from the correlated machine accounts. So …

Hi @i_sethia Based on the documentation, Machine Identities serve as governance containers that group one or more Machine Accounts. The certification process primarily governs the access and entitlements associated with those machine accounts rather than the Machine Identity object itself. Ownershi…

So, is my understanding correct that there is no separate certification type specifically for Machine Identities? Does the Machine Identity / Application Identity mainly act as a grouping or review container for correlated machine accounts and their access during a machine account certification? A…

Yes, there’s no separate certification for machine identities. Yes, it depends on whether you create the machine identity individually or group them together. Yes, the machine identity has an associated service account with entitlements, and that’s exactly what we want to review during the campaign…

Please check this video for clarity on all type of certification. [image] Governing AI agents with Agent Identity Security Video Library [image] Agentic AI technology is here and rapidly proliferating. Which AI agents are part of your daily life? In this ses…

Thank you for the clarification. That helps. I have a follow-up question around the certifier/reviewer behavior for machine account certifications. If the campaign is reviewing the service/machine account entitlements associated with a machine identity, who is expected to be the certifier/reviewer…

Thank you for the clarification.

Clarification on Machine Identity governance flow, governed items, and certifier behavior in ISC

Identity Security Cloud (ISC) ISC Discussion and Questions

RAKRHEEM (Rakesh Bhati) June 23, 2026, 7:59am 5

Please check this video for clarity on all type of certification.

Topic		Replies	Views
Difference in Roles and Responsibilities: Machine Account Owner vs Machine Identity Owner ISC Discussion and Questions identity-security-cloud , machine-identity-security , machine-accounts	8	125	July 1, 2026
New Capability: Machine Identity Security! Product News identity-security-cloud , new-capability , machine-identity-security	23	2131	April 3, 2026
Machine Identity Security in action: From classification to endpoint management Video Library identity-security-cloud , community-live-stream , machine-identity-security	0	990	November 13, 2024
Explore Machine Account Discovery in Identity Security Cloud Video Library identity-security-cloud , machine-identity-security	5	574	July 21, 2025
Certification – Governance Groups – Owner as Reviewer ISC Discussion and Questions identity-security-cloud , certifications , entitlements	2	177	June 24, 2025

Clarification on Machine Identity governance flow, governed items, and certifier behavior in ISC

Related topics