# Looking to see if it is possible to do a Delta Manager Certification

**URL:** <https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, certifications\
**Created:** [February 6, 2024, 4:21pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175 "2024-02-06T16:21:25Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![langn](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@langn](https://developer.sailpoint.com/discuss/u/langn)\
**Post date:** [February 6, 2024, 4:21pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/1 "2024-02-06T16:21:25Z")

</div>

### Which IIQ version are you inquiring about?

Version 8.3

### Share all details related to your problem, including any error messages you may have received.

I have been approached by leadership to setup a Manager Certification in IIQ to only include new entitlements/access since the last manager cert. Having troubles finding out if this is possible. Any advise you could provide would be greatly appreciated.

---

<div class="post-metadata">

**Author:** ![amishra97](https://avatars.discourse-cdn.com/v4/letter/a/50afbb/32.png) [@amishra97](https://developer.sailpoint.com/discuss/u/amishra97)\
**Post date:** [February 6, 2024, 6:19pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/2 "2024-02-06T18:19:22Z")

</div>

@langn

I believe you can use this attribute.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/f/f527456a6ea27e9aad6d5254abf97e1e5c884038.png)

---

<div class="post-metadata">

**Author:** ![vinnysail](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vinnysail/32/17001_2.png) [@vinnysail](https://developer.sailpoint.com/discuss/u/vinnysail)\
**Post date:** [February 6, 2024, 10:07pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/3 "2024-02-06T22:07:38Z")

</div>

Hi @langn,  
A similar post was present in the sailpoint community portal. See if this helps

[https://community.sailpoint.com/t5/IdentityIQ-Forum/Delta-manager-certification-can-this-be-done/m-p/41945](https://community.sailpoint.com/t5/IdentityIQ-Forum/Delta-manager-certification-can-this-be-done/m-p/41945)

---

<div class="post-metadata">

**Author:** ![langn](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@langn](https://developer.sailpoint.com/discuss/u/langn)\
**Post date:** [February 7, 2024, 3:13pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/4 "2024-02-07T15:13:07Z")

</div>

This article is nearly 10 years old and not all the links are valid anymore. Is this the only option available in IIQ to accomplish this type of a cert?

---

<div class="post-metadata">

**Author:** ![langn](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@langn](https://developer.sailpoint.com/discuss/u/langn)\
**Post date:** [February 7, 2024, 3:14pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/5 "2024-02-07T15:14:16Z")

</div>

We do have the changes detected option showing up in our certifications. Just not sure how to take that information and apply it to a new certificaiton.

---

<div class="post-metadata">

**Author:** ![amishra97](https://avatars.discourse-cdn.com/v4/letter/a/50afbb/32.png) [@amishra97](https://developer.sailpoint.com/discuss/u/amishra97)\
**Post date:** [February 7, 2024, 8:55pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/6 "2024-02-07T20:55:21Z")

</div>

Hi @langn ,

You have to use **Identity Certification History** (found under history tab of identity) in your code. Change detected is calculated based upon this Certification History. For your reference, I am attaching a [document](https://community.sailpoint.com/t5/IdentityIQ-Wiki/How-to-use-changes-detected-to-quickly-spot-new-users-and-new/ta-p/166950).

If you want to do delta manager certification, then put this script in your certification’s “Active Period Enter Rule”.

You have to include logic to remove items from the certification (commented out in code).

```import
  import sailpoint.object.CertificationEntity;
  import sailpoint.object.IdentityHistoryItem;
  import sailpoint.object.Certification;
  import sailpoint.object.Identity;

  List entities = null;
  Identity identityObject = null;
  List items = null;
  IdentityHistoryItem idh = null;

  entities = certification.getEntities();

  if(entities != null &amp;&amp; entities.size()>0)
  {
    for(CertificationEntity entity : entities)
    {
      identityObject = context.getObjectByName(Identity.class,entity.getIdentity());
      items = entity.getItems();
      if(items != null &amp;&amp; items.size()>0)
      {
        for(CertificationItem item: items)
        {
          idh = new IdentityHistoryItem(identityObject,IdentityHistoryItem.Type.Decision,item);

          if(idh != null)
          {
            System.out.println(idh.toXml());
            //exclude from certificate
          }
        }
      }
    }
  }

```

---

<div class="post-metadata">

**Author:** ![langn](https://avatars.discourse-cdn.com/v4/letter/l/c6cbf5/32.png) [@langn](https://developer.sailpoint.com/discuss/u/langn)\
**Post date:** [February 27, 2024, 3:13pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/7 "2024-02-27T15:13:25Z")

</div>

Hi Abhinav,

I want to thank you for your post back to me. I have been looking at this now for few days and have a question.

I would like to know why we are creating a new IdentityHistoryItem in the code, instead of grabbing an old one to look at (i.e. so we can determine if the item should be removed from the cert).

Currently when we use this code and it is excluding everything as we don’t currently have any nulls.

I thank you for your help on this.

---

<div class="post-metadata">

**Author:** ![vishal\_kejriwal1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vishal_kejriwal1/32/10904_2.png) [@vishal\_kejriwal1](https://developer.sailpoint.com/discuss/u/vishal_kejriwal1)\
**Post date:** [February 27, 2024, 4:50pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/8 "2024-02-27T16:50:24Z")

</div>

I don’t think just doing the delta for the Manager certification or any certification is correct from the governance .

Are you saying that want the person access was reviewed by manager / any in last cycle is still valid ? I don’t think this is correct better their would be a option or column or something which can give idea to a reviewer that this was reviewed by you last time and this was your decision.

I haven’t explored much but i think recommendation engine could help with this type of requirement . if you don’t want to use the ootb engine pretty much you can make your own .

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [April 27, 2024, 4:50pm UTC](https://developer.sailpoint.com/discuss/t/looking-to-see-if-it-is-possible-to-do-a-delta-manager-certification/29175/9 "2024-04-27T16:50:34Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
