Role with Assignment Rule and Entitlements

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

Version 8.3

Share all details about your problem, including any error messages you may have received.

Hello,

I’m trying to create a Role that uses an Assignment Rule based on an attribute of the Identity, and I want this Role to assign some entitlements to the Identities with the matching attribute.

From what I understand, the Assignment Rule can be set on Business Roles, but this type of role doesn’t allow the configuration of the entitlement section. On the other hand, with IT roles, the entitlement section is configurable, but there is no Assignment Rule.

Would creating a Business Role, for the Assignment Rule, with a Permitted IT Role, for the entitlements, be a good approach for this scenario?

Or would a Birthright role make more sense in this scenario?

2

Hi @brunoocarvalho ,

Create a Business role with whatever matchlist criteria you want (means to whom you want to assign this role). And, create a IT role in which you can add whatever groups or entitlements you want to assign to the user. And use this IT role in the Business role as required role. Then it will work. This is the default behavior of the Business and IT role.

If you are interested and would like to know more. Please go through it: https://community.sailpoint.com/t5/Technical-White-Papers/Role-Management-in-IdentityIQ/ta-p/77726

3

Hi @brunoocarvalho,

It entirely depends upon your use-case. If your use-case is just with respect to attribute changes then you may stick with business role.

Thanks