Entitlements into Role

Hi Team,

Adding Entitlements to Role vs Adding Access Profile to Role.

We can add conditions in AccessProfile to define which account should get the AP when identity has 2 accounts in the same source.

Apart from this, I dont see any major difference between adding entitlements vs adding access profiles to the role.

Can someone tell me if there is any other major impact if we add entitlements directly to the role.

There is not much advantage, it is just additional functionality.

You can add Access Profiles in LCS - Provisioning, you can’t add Roles there. Yo will have some advantages here.

Adding Entitlements directly in Role is a new feature, if you think that why should I create an Access Profile just because that is the only way I can add in Roles, then this is the answer for that.

Let’s say that, you need to have 2 Entitlements from different sources in a Role, earlier you need to create 2 Access Profiles for that, unnecessary objects, but with this new feature, you don’t need to.

You can add Access Profiles in Application, not Roles.

Choose as per your requirements.

4 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.