New Capability: Identity Access UI
This is available in all sandbox and production tenants. It’s available under Try New Experience.
A new Identity Access UI enables Org Administrators and Helpdesk to view an identity’s access items (roles, access profile, entitlements, and applications). Org Administrators can revoke access items when the option is available.
You’ll know this is available in your tenant when you see an Access UI after clicking the Try New Experience button.
Promotion Timeline for Try New Experience
Try New Experience will replace the current UIs as soon as February 26th, 2024.
The Access UI is the last item that will be added to Try New Experience.
The final feedback window for Try New Experience is open until February 16th, 2024.
Try New Experience will replace the current UIs in sandbox as soon as February 26th, 2024.
We will update you again in our next announcement: “New Capability: Identity Experience.”
More About Revokes
Org Administrators can revoke access items when the option is available. Helpdesk users cannot revoke access items.
- Roles are revocable if provisioned via access request.
- Access Profiles that stand alone from roles or lifecycle states are revocable.
- Entitlements that stand alone from roles or lifecycle states are revocable.
- Applications are not revocable.
The system does not account for access that is indirectly chained. For example, a role could contain entitlements A and B. A separate access profile could contain entitlements A and B. If a user receives the role, the access profile will be detected and presented as revocable. The role will re-add the entitlements if the access profile is revoked. The access profile would then be re-detected. We recommend adjusting your access model if you encounter this scenario.
More About Applications
The Access UI will always show tabs for Roles, Access Profiles, and Entitlements. It will hide the Applications tab unless the identity has applications. This feature simplifies the experience for organizations that don’t use applications.
Spotlight on the Helpdesk
You might not use the Helpdesk user level often (or ever). Take a minute to use Try New Experience as a Helpdesk user to understand how its capabilities have improved.
Next on the Roadmap
- Addressing customer feedback about Try New Experience.
- Allowing access profiles to be revoked when the option is available.
- Removing the option to revoke entitlements that would be re-added.
Submit Questions or Feedback
Submit questions or feedback , and we’ll be in touch.
You could also schedule time to provide feedback over Teams!