IT role not provisioning even after refreshing the users

IdentityIQ (IIQ) IIQ Discussion and Questions
, , , ,
1

Hi all,

I am facing an issue where IT role not provisioning even after refreshing the users.

This is only happening for users who have multiple AD accounts.

I cant even find a manual workitem that lets me select the account that needs to be provisioned with the role.

Thanks in advance

2

@rishavghoshacc Have you mapped any account selector rule to your IT Roles? If not, IIQ will open a Role Account Selector workitem to select the account to be provision.

3

@rishavghoshacc If not, you need to write an account selector to let IIQ know which account to sync in AD in case user has multiple AD accounts.

4

To be clear, is the IT Role required by any assigned Business roles? Out of the box, IT roles are only detectable. They’re not going to be provisioned unless they have been requested in the context of a role assignment. If IdentityIQ can’t figure out the account to which a required role should provision, then it will call an account selector rule and/or present a work item with the unanswered questions that are required to successfully provision. It’s impossible to say why your role is not provisioning without knowing how the role is configured.

5

@neel193 That is what I am looking for. Usually, we get a workitem where we select the account to be provisioned with the roles.

We are not getting for these users

6

@rishavghoshacc seems you wanted to share something, which was not added to the comment.

But to fix this you need to write a account selector rule. Please check the attached document for reference. check Page 47.
Rules in IdentityIQ 7.2.pdf (2.0 MB)