Need Governance Group Visibility Into Entitlements

My team is encountering an issue with Governance Groups, where we can’t see the associations of requestable entitlements. We’ve attempted to find the information we’re looking for in the UI and in the API, but there seems to be a complete miss of being able to systematically query for associations outside of Access Profiles.

Use cases:

  • Retiring a Governance Group and needing to reassign approval flow
  • Updating approval flow

Governance Groups, in general, have a lack of visibility from the identity perspective but that’s a whole other can of worms.

Any help/suggestions would be greatly appreciated!

2 Likes

Hey @gigisherer1 , if you’re talking about the Owner appearing on the Search API, for some reason for entitlements is missing.
I was able to successfully grab for Access Profiles and Roles but not for entitlement.

-Ivan

Thanks, Ivan, but I’m not talking about the Owner field. I’m talking about the Governance Group associations on Entitlement approval/request config. This seems only to be available to view at this endpoint and we need a better solution:

GET Entitlement Request Config
{{baseUrl}}/entitlements/:id/entitlement-request-config

DevRel Team, any insight?

(@derek_putnam, is there an easier way I can tag the DevRel team?) :face_holding_back_tears:

Hi Gigi!

You can tag the entire DevRel team with @developer_relations_team for future reference :grin:

The GET /beta/workgroups/:workgroupId/connections is an API that lists all connections for a given governance group, including what items that governance group owns and on which items it has been configured as an approver:

https://developer.sailpoint.com/docs/api/beta/list-connections/

Unfortunately, entitlements are NOT returned at this time. I have filed a ticket, but I don’t have an ETA for completion.

In the mean time, you could manage the governance group as entitlement approver relationship with tags, which are assignable and searchable in Search. You can also filter by tags in the global entitlement catalog.

image

image

Not the best solution due to the management overhead, I know, but it could be a temporary workaround.

2 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.