Managing entitlements

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi all,

I have a requirement of removing entitlements from a source. The entitlements exist only in IDN, they’ve been removed from the source itself but entitlement aggregation only adds new entitlements.

Is there any other way to remove entitlements on a source other than resetting the source? Source reset is rather disruptive and will also reset access profiles (you can only skip=identities, not access profiles) which is not desirable.

One of the integrated sources seems to have followed the desired behaviour previously, but not for the past month.

The reason why this matters is that we’ve got an automated process creating access profiles 1to1 for each entitlement since access controls for the source have to be granular. If old & unused entitlements are not removed from the source, we will end up with an ever-growing list of access profiles as a result. Requesting these would end up in errors as entitlement does not exist outside of IDN.

2

Hi Marten,

I reached out internally to see if I could find a good answer for you. Unfortunately at this time, we do not currently have a way to selectively remove entitlements from the catalog. This would be a great feature request if you want to submit an idea through compass. Here is a link to some documentation through Compass: How To: Submit an Idea - Compass.

Thank you,

Tyler

1 Like
3

@tyler_stevens could you link the Feature request you summited on this topic?