The way I’d suggest tackling this would be to make a Workgroup the Entitlement Owner for the AD group and use the Loopback Connector to manage the Workgroup members via birthright role assignments: https://community.sailpoint.com/t5/Professional-Services/IdentityIQ-Loopback-Connector/ta-p/172364
Related Topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Create Active Directory Group - Entitlement Update Worklofw | 6 | 593 | January 29, 2024 | |
| Approval Assignment rule not creating request when workgroup used for approval | 0 | 1460 | April 29, 2022 | |
| List Workgroup Members | 6 | 2315 | July 26, 2023 | |
| Add entitlement to identity via API | 2 | 1791 | April 4, 2022 | |
| How to create a Workflow/s that creates an AD group and a workgroup as approvers for that AD group | 6 | 504 | December 23, 2023 |