I guess you will have to look through all the entitlements and roles of a user one by one, may be via APIs.
Just a thought on how this could be done via APIs in the script:
Get All Users of a source
For each user:
a. Get all of their entitlements
b. Get all of their roles, and for each role, get their corresponding access profiles(if any) and thus the corresponding entitlements
Compare each entitlement in 2a list with the entitlement list in 2b list. The entitlements of 2a list with no match in the entitlements of 2b list are the entitlements that are not provisioned through Roles
I ended up creating search queries for each of the roles we have, then created a PowerShell script to invoke the search API’s one after the other and writing the JSON output to separate files.
Hi Shailee, This approach sounds interesting, as I have similar requirement to report on source side access addition.
Is there any other options? Can this be achieved via NCD?
Thanks.
I see you have already found the way. But still sharing how i achieve this using the powerBI report which is eventually based APIs but it lets me schedule the automatic refresh such that the support team can monitor them on daily basis and then we can improve our role model and also compare if that was a solution proposed by AI recommendation for role model.