Entitlement not getting assigned

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hi Everyone,
We have created a role to assign a birthright access. After adding conditions and enabling the role, accounts are getting assigned to the roles, but the entitlements added to the role is not getting assigned to the users.

What could be the issue here.

Thanks

2

Hi @Sgupta1 ,
Try assigning role by requesting it in request centre ,If there is some issue in it then check the provisioning rule/policy related to it.
If it works fine then it has to works the similar way when assigned through birthright role.
Try checking logs of a user assigned by birthright roles.
Thanks!!!

1 Like
3

Thanks @naveenkarthikkrk, I already tried assigning role and entitlement through request center it is working fine. But through birthright entitlement is not getting assigned.

4

Are you putting the entitlement in an access profile and then putting that in a role? Or straight entitlement into role?
If it’s through an access profile, the access profile may not be enabled or improperly configured.

5

hI @tysremi I tried both adding Access profile to role, and adding Entitlement directly to the role. Both are not working.

6

Have you performed the following items:

  • Is the entitlement mentioned in this context is related a direct connector or disconnected connector source?
  • Account Activity of Affected Users do you see any specific connector errors?
  • Events on the affected users do you see any errors?
  • At last is there provisioning workers in queue on your tenant?
    Having a more verbose issue explanation would give us more context to understand the issue.
    Thanks,
    Aman
1 Like
7

Have you tried creating a new role and adding the entitlement there?
Just trying to elimitate issues here.

If role request works and users get it assigned… if entitlement requests works and users get it assigned…

8

This is a Webservice based application I have integrated there we are having requirement to assign a role as a birthright.
I don’t see any issue/error with the users that are eligible to get entitlement assigned but not getting assigned.
If users are getting roles means they are fulfilling the conditions, but they are not getting the entitlement assigned.

Same implementation I have done with different web service connector that is working.

9

Yes I have tried this.

10

Does the user perhaps already have multiple accounts of this source? As then you need access profile criteria to select the correct account.

11

Did you click on “Apply Changes” at the top of the Roles screen?

12

There was some bug with Sailpoint itself. I tried deleting everything and created new. And it worked.

Thanks Everyone for helping. :slight_smile:

1 Like
13

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.