Role Discovery in IDN

Hi Experts,

I’m trying to use Role Discovery Option, I’m able to filter the identities based on attributes, when I try to discover common roles / specialized roles, I always get Role Discovery could not find any potential roles, but I validated the entitlements of Identities and I see there are lot of common entitlements.

By default, when you create a role mining session from the UI, there are default settings for the minimum number of identities in a role and the threshold for the percentage of users who hold the entitlement for it to be included in the role. With some data sets, these parameters are too aggressive and we end up with no recommended roles or roles with minimal entitlements. In order to understand the settings and change them you can use the following API calls:

Search for role mining sessions

Patch role mining sessions

You can modify the pruneThreshold and the minNumIdentitiesInPotentialRole

{
    "op": "replace",
    "path": "/pruneThreshold",
    "value": "83"
  },
  {
    "op": "replace",
    "path": "/minNumIdentitiesInPotentialRole",
    "value": "10"
  },

Hope this helps.

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.