Hi All, What is the best practice handle nested AD groups???. We are looking to perform certifications on AD security groups but many groups are having nested structures and not sure about the best practice to handle this. Any help/pointers would be really appreciated.

I believe the product doesn’t offer support for this feature. While you can certainly examine the group membership, removing access from nested groups or indirect memberships may not be possible. Nevertheless, you can utilize certifications to evaluate these indirect memberships and explore options …

Nested AD groups - Best Practices

Identity Security Cloud (ISC) ISC Discussion and Questions

princess (Princess Blando) January 19, 2024, 3:51am 11

The following screenshot may be custom functionality that is not provided out of the box by SailPoint.

@tmclaughlin @jrote01 @c115665

The nested group is included in the access certification of the group we’re reviewing.

How to include nested AD groups in campaign

Topic		Replies	Views
How to include nested AD groups in campaign ISC Discussion and Questions aggregation , identity-security-cloud	9	201	October 28, 2024
Best Practises for handling group based applications ISC Discussion and Questions	4	1864	August 1, 2023
Active Directory Source LDAP Filter ISC Discussion and Questions identity-security-cloud	2	454	January 30, 2024
Active Directory Connector, Effective Access and Nested Groups IIQ Discussion and Questions entitlements	1	1085	July 19, 2023
Issue with nested group in AD IIQ Discussion and Questions aggregation , identityiq	3	100	November 21, 2024

Nested AD groups - Best Practices

Related topics