If all those assignments put in roles , then Account will show not every assignment but only role(s)?
Hello Kestutis,
If a user has access to a particular application then it will show in the Application Account section of the identity cube. There is no way to limit the number of application accounts shown in the identity cube. You can use preventative policies to prevent users from being able to request/have certain entitlements but that is use case dependant and it is mainly used to stop access creep.
As for the putting these assignments in a role, if you bundle up all the accesses to a particular application in a role and add that role to a user, you would still see the applications in this section because through that role the user will be granted access to this particular application.
I hope i made some sense, do let me know if this helps in anyway.
-Aishwarya
Hello Aishwarya and thank you for you answer, but problem not applications, but number of assignments (as in picture) this account for “ZIVIS” application has >10000 assignments(entitlements) (yee i know big number) but problem is loading and showing information it takes very long.
What I am thinking not to let show all application assignments, limit number, disable, put all assignments in roles, to cut time of loading application account information.
Then number of assignments is large, its better to leave it only in identity cube “Entitlements” .
Problem: I still dont know how better overcome it (loading data of application )
Oh I got it, I’m not sure if there is way to hide the application account information in the identity cube. But putting all the assignment in roles won’t solve your issue because you will still be seeing all the information in the cube and the loading time will be the same.
do let me know if you come up with a way to handle this, it would be super interesting if there is a way to hide the data somehow.
Thanks
Aishwarya
I don’t think there is OOTB config for this just to turn off displaying Link (Account) information. We can explore for that in IIQ documentations though, if it is there then it is easy for you.
If I understood your requirement correctly,
In one application, you have lot of assignments that is taking a lot of time to load.
Guess we should have Load More feature (displaying 10/15 values for an entitlement max with option to Load More), we can provide that as an idea.
To disable account data, you need to customize xhtml files which will be in /webapps/identityiq/identity.
Please note that this changes will impact other accounts as well.
Thanks
Krish
Hi @MVKR7T you understand correctly. I think we should provide as an idea. And thank you for information about customize xhtml, I will try.
an idea to SailPoint was created :
https://ideas.sailpoint.com/ideas/IIQ-I-1149
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
