MSSQL explicit permissions

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

8.5p2

Please share any images or screenshots, if relevant.

image
image671Ă—370 92.2 KB

Share all details about your problem, including any error messages you may have received.

*Hello All,

We are using* Microsoft SQL Server to pull the Database application logins. The issue that we are seeing is that it is not aggregating the explicit permissions which I have shown in the attached screenshot. Does the connector not support these permissions? Please let me know if you have configured this connector before and have been able to aggregate the “Connect/Alter/View” type of permissions.

Thanks,

Nisha Rai

2

@NishaRai Have you enabled “Include Permissions” checkbox in account schema?

image
image425Ă—335 5.44 KB

3

Thank you so much! I can see them now

4

Hello @SivaprakashRNTBCI , how can i mark these Permissions as entitlements? our requirement is that they need to be included in access reviews

5

@NishaRai Permissions are included in certifications by default. Have you tried generating certification for this application?

6

When I stage an application owner review, the account details shows the includedPermissions as user:SERVER on the Attributes section but not as an individual item in the access review

image
image980Ă—714 16.9 KB

image
image1886Ă—126 23.4 KB

7

@NishaRai Please check if you have enabled “Include Additional Entitlements” option in your certification.

8

I do have this option selected in the certification.

The account shows the directPermission like this:

image
image878Ă—284 9.59 KB

9

@NishaRai If you have configured exclusion rule, make sure you are not excluding this.

image
image757Ă—160 3.86 KB

image
image1882Ă—317 15.6 KB

10

are you promoting the includedPermissions as managed or entitlement in any other way than selecting the include Permission check box?

11

@NishaRai No. I have just enabled includedPermissions in the application.

image
image1403Ă—856 54.1 KB

12

Got it, thank you. Could you please let me know which certification you are using?

13

I actually had not refreshed the account list with the Refresh assigned, detected roles and promote additional entitlements option.
I can see these entitlements in the access review now.
Thank you so much!