I am facing an issue with the ISC Governance connector reassignment configuration. I have created the PAT and assigned the “sp:scopes:all” scope to it. The test connection and aggregation are working fine.
However, when I disable an identity, all the necessary accounts get disabled, but it does not trigger any task to reassign the owned objects to the identity’s manager.
Could you please let me know if there is any additional setup required for this functionality to work?
Hello @Chaithu9110, I am discussing about the OOTB reassignment configuration of ISC Governance connector.
Does it require reassignment Rule to be configured?
Hello @ag2024,
The objects you want to be reassigned need to be marked in this tab.
After an identity is disabled, the reassignment occurs automatically.
Thank you for your response. This connector currently working as expected.
Although, the SailPoint support team confirm there is an open issue. The pending access request approval only reassigns to their manager if the inactive identity owns any object (Ex. Access Profile, Role etc.)
We can implement similar functionality utilizing the API as well.
Please let me know if anyone having similar requirement and need custom script (developed in PowerShell) to overcome the OOTB connector limitation.
