I’m trying to use Role Discovery Option, I’m able to filter the identities based on attributes, when I try to discover common roles / specialized roles, I always get Role Discovery could not find any potential roles, but I validated the entitlements of Identities and I see there are lot of common entitlements.
By default, when you create a role mining session from the UI, there are default settings for the minimum number of identities in a role and the threshold for the percentage of users who hold the entitlement for it to be included in the role. With some data sets, these parameters are too aggressive and we end up with no recommended roles or roles with minimal entitlements. In order to understand the settings and change them you can use the following API calls:
Search for role mining sessions
Patch role mining sessions
You can modify the pruneThreshold and the minNumIdentitiesInPotentialRole