Requestable Entitlements

Identity Security Cloud (ISC) ISC Discussion and Questions
1

One of our sources has over 38000 entitlements.
With that large number of entitlements, we’d like to:

  1. Mark the majority of those entitlements non-Requestable. With 38000 entitlements, the UI displays over 250 pages, this is not an ideal situation. Especially, since when I select the page to Remove Requestable, I get an error: Unable to read entitlements at this time. Please try again later
  2. Is there a way to default the entitlements to be non-requestable?
  3. Is there a way to group or sort the entitlements on the Request Center / Entitlements screen? I see it has a Beta tag, so I’m not sure if there are any options available.

Thanks

2

Hey @chrisp ,
This would be ideal feedback to get in front of our Product Management team. Therefore in this instance, please do raise these same points as an idea in our ideas portal.

The more we have of this feedback and higher the votes of the ideas, the greater the likelihood we can see these improvements and features available in IdentityNow out of the box in the future (you may find it’s already highly voted for, or there are different ideas, so simply voting would be useful):

You are correct the Entitlement Request feature has been released for all Access Request customers, as this is currently an ‘open beta’ there is still this window of opportunity to provide this feedback before official release. This also means there is no finalized documentation as of yet as there is potential for features to be enhanced.

See more details on open beta and our summary of SailPoint Access Programs:
https://community.sailpoint.com/t5/IdentityNow-Wiki/Summary-of-SailPoint-s-Access-Programs/ta-p/187630

Kind Regards,
Omar

3

@chrisp,

We just released a new API that will allow you to mark entitlements as non requestable in bulk. Check out the new Entitlements API. It’s currently in beta and we will be adding additional endpoints soon.

1 Like
4

Thanks @colin_mckibben I saw that.
I’m waiting with anticipation for the list entitlement endpoint, so we can page through the 38K entitlements, 50 records at a time, and mark them as non-requestable!

Chris

5

Hi Team,

In addition to non-requestable entitlements, is there a way to assign a non-requestable entitlement to an identity via an API without going through the request process?

Thanks.

6

There is now a list entitlements endpoint that you can use to page through all of your entitlements.

8

Why not add a column to the entitlements export/import feature in the UI that allows you to mark things as priviledged and update descriptions?

1 Like