Role Assignment Date and time in ISC

SailPoint Human Fabric (SHF) SHF Discussion and Questions
1

:bangbang: Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

Hey All

Do we have a way to capture report with Role assignment date and time in the product

Where as today product allows us to search in access history tab and user events

Another feature Sailpoint shows on identity cube on selection of role in user profiles it shows a tab named assignment it would be great if we can capture the assignment date in this tab

I want a report that helps me know from when the particular access items got assigned to users

Thank you in advance

2

Hello @Ranjithreddy21 ,

We can capture this using events data in the search. We have created timestamp for the event created which says when the role got assigned.

Use can use this query to get the report

name:"Add role passed" AND target.name:zz741 AND attributes.attributeValue:"AD Birthright Access"

image
image1811×274 21.3 KB

3

Hello Ranjith. As @JackSparrow suggested, Add Role Passed is the right audit event for the role assignment event time, since ISC defines the event’s Created field as the date the event began. For a reusable report across identities, you could use the normalized event name:

technicalName:"ROLE_ADD_PASSED"

You can add attributes.attributeValue to filter for a specific role, then export the Events results to CSV with fields such as Created and Target, or save the search and subscribe to it for scheduled email delivery.

Audit events are stored for one year plus the current month. For older audit data, SailPoint documents the Audit History Request process for data up to five years old.