Is it possible to create manager certification for Role in Sailpoint ISC?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi All,

I am trying to certify roles in my organization and manager of the user has to certify those roles. But looks like only individual, role owner or governance group can only certify a role certification. Has anybody implemented this before and if yes, what was the workaround? Thank you for your insights.

2

Looks like we can achieve this through Access certification from search.

3

Role certification is to review the role configuration. It’s not Access Certification

4

Hi @sijanpuri,

When you mention “Role Certification,” could you please clarify what exactly you intend to certify?

  • Is it the role assignments to users, or
  • The role configuration/composition itself?

In Identity Security Cloud (ISC), Role Composition Certification refers to reviewing the configuration of a role , not the users assigned to it. Since managers typically don’t manage role configuration, they can’t be assigned as reviewers for these campaigns.

If you’re looking to review roles assigned to identities, that can be done using a search-based access certification campaign.

A few important points to note:

  • Only roles not provisioned via birthright rules can be certified.
  • Roles assigned via birthright rules can only be acknowledged, not certified.

You can find detailed steps in the documentation here.

Here’s how you can create one:

Hope this helps !

Thanks
Sid

5

I meant review roles assigned to identities. This is not referring to the Role composition Certification. Thanks for your reply.