Hide roles and entitlements from request center

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

I want to hide few roles and few entitlements from request center for all identities whose employeeType = A

What are the different ways to achieve this?

2

Dear @selvasanthosh

Did you get chance to go though below topic:

3 Likes
3

Hi @pattabhi ,

Thanks for the reply. I did check the documentation but was bit confused and also wanted to check if there’s any other way to do it.

4

Hi @selvasanthosh ,

If your requirement is to hide certain roles/entitlements in the Request Center for users with employeeType = A, you can achieve this using Segments.

Here’s how:

  1. Create an identity attribute – for example, eligibleUser – that holds a value of True/False or Yes/No. (This is necessary because Segments only support the equals operation.) You can achieve this using a transform, for example: if employeeType = A → True, else → False, or adjust the logic as per your requirement.

  2. Build a segment – add the required roles/entitlements to this segment.

  3. Add criteria – configure the segment with the condition eligibleUser = True/Yes.

Once you configure and enable the segment, it may take some time before changes appear in the Request Center. After the setup is complete, only users with eligibleUser = True/Yes will see the specified roles/entitlements. Other users will not see them.

Note: Any access items not included in a segment will remain visible to all users.

1 Like
5

This can be achieved with segments. Here is an old blog that might be able to help you out understand this.

SailPoint IdentityNow : Segments Feature – EnH iSecure Blog

1 Like
6

This is not a solution. If create a segment for the user who is from employeeType = A. The user from other types can request the same access for him, so this is not a reliable solution. We have to build a Workflow for this use case.