Improvements to "Find User Access" Feature in Manager User Access (IdentityIQ 8.4)

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Subject: Enhancement Request: Improvements to “Find User Access” Feature in Manager User Access (IdentityIQ 8.4)

Dear SailPoint Community,

I hope this message finds you well. I am currently working with SailPoint IdentityIQ version 8.4 and have been utilizing the “Find User Access” feature within the Manager User Access functionality. While this feature is incredibly helpful, I have noticed some areas where enhancements could improve its usability and effectiveness.

Current Behavior:

When using the “Find User Access” feature to model access after an existing user, the system displays all access associated with the selected user. However, it also includes access that the requester already possesses, which can lead to confusion and inefficiencies during the access request process.

Suggested Improvements:

  1. Filter Out Existing Access:
    The feature should automatically exclude any access that the requester already has. This would ensure that only the access that can be added is displayed, making the process more streamlined and user-friendly.

  2. Option to Request All Access:
    Additionally, it would be beneficial to include an option to request all access from the selected user in one step, rather than having to select individual entitlements manually. This would save time and effort, especially in scenarios where a requester needs to replicate the full access of another user.

Benefits:

  • Reduces confusion by displaying only relevant access options.

  • Improves efficiency by minimizing manual selection of entitlements.

  • Enhances the overall user experience for managers and requesters.

I would appreciate any guidance or feedback from the community on whether similar enhancements have been implemented or if there are existing configurations that could address these concerns. If not, I would like to propose this as a feature request for future releases of SailPoint IdentityIQ.

Thank you for your time and support!

Best regards,

Feel free to customize this post with your name and any additional details about your use case. Let me know if you’d like further assistance!

2

@kenney_s Thanks for putting this together. I would really vote for having these features added. I remember running into the same issue, we had to create a custom form and added mirror id field to achieve the same. But it is not a sustainable option in longer run.

Having this in OOTB will greatly help. Please go ahead and propose this as a feature request.

3

@kenney_s - I will vote for it :slight_smile:

4

that would be really better way to use this feature.

When someone is using this feature ofcourse they want to know what they are missing.