Need information on entitlement value (entitlement name) change in IIQ for already onboarded app

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

[8.X]

Please share any images or screenshots, if relevant.

[Please insert images here, otherwise delete this section]

Please share any other relevant files that may be required (for example, logs).

[Please insert files here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

[We have a requirement to change the entitlement value (entitlement name) in SailPoint for already onboarded application entitlement. E.g., current entitlement value =‘TRD’ and we want to change it to ‘TRADER’. Let us know what will be the impact if we change the entitlement value using debug page. e.g., any impact on user to entitlement association or any history data]

2

Hi @saurabh_padmawar

You should not change the entitlement value (which is unique identifier for entitlement) through debug.

These are the list of some possible impacts -

  • Values might get replaced during next Aggregation
  • Identity refresh for those links with promote managed attributes will not work as expected
  • Identity & Entitlement association might be impacted
  • Certifications done on those entitlements
  • Audits & Provisioning Transactions
  • Any Reports which are configured

Additionally, this might raise many compliance concerns. Better to avoid doing it from debug. Ask the concerned teams to update in Target app and fetch it from aggregation.

Thanks,
Harshith