Defining Access of an Entitlement

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

IIQ Version 8.3

image
image975×223 46.8 KB

image
image975×106 11.2 KB

When editing any object - entitlement, group, unit, profile - of the Entitlement Catalog, several tabs become available. These tabs vary, but more most objects have 5 tabs - Standard Properties, Object Properties, Members, Access, Classifications. See image below.

My question is, how is the content of the “Access” Tab defined? See the second image. More specifically how are source, type, value, rights, and path of an object on the entitlement catalog being defined or populated?

At my org, the Access tab for every type of object in the Entitlement field is empty. I am wondering how we can define the fields in this tab and if information of this tab can be used to define effective access an entitlement grants. For example, defining the access (rights and permission on a computer) granted by a AD group.

Thank you all for your contributions.

2

@HkabirBBH I never explored it but it could be related to Effective Access. Please check this thread if it helps: https://community.sailpoint.com/t5/IdentityIQ-Forum/JDBC-Effective-Access-IdentityIQ-7-2/m-p/138207

3

Hi @HkabirBBH, the access tab shows the permissions that a group has on objects.
The permissions come in from an “unstructured target” aggregation.

4

For example: PAM applications.

The access tab for a group shows the target permissions on targets/containers