ISC SSO for admins Secondary or personal privilege account of Entra ID

Identity Security Cloud (ISC) ISC Discussion and Questions
1

We want to segregate the admin access to different personal privilege accounts of Entra ID. But currently SailPoint assigns he user level at Identity level.

Possible solution:
Create a different identity for personal privilege accounts and add admin level access to this identity. But as this identity is not associated with regular identity, leaver will not remove the access. Also potentially this account will have other application privilege access too, so handling other IGA capabilities such as certification, access request requires custom process.

Any other alternative to this solution?

2

You could integrate the Identity Security Cloud Governance connector, and use it to create roles that grant admin access based on membership in the Entra group

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.