SDIM Request Grouping in Campaigns vs Access Requests (API)

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

I noticed when a user has access revoked through a campaign, it will group the SDIM access request (ServiceNow in my case) by user and source. So if a reviewer revokes 5 entitlements from a user in a single source, it comes over in a single SDIM request.

Currently, you cannot do this using the create-access-request API because it only supports revoking a single entitlement per user at a time, so we have to submit 5 different requests for this.

Is there any method of using the API that might group these requests together so they get sent as a single request to the SDIM system?a

2

Hi @mcheek,

If you regroup this entitlements on access profile or role this can be a solution for revoking with a single SDIM request.

We use SDIM and we have exactly the same behavior that you describe.

3

I get that, but creating 1:1 accessprofiles:entitlements for that specific purpose seems like a lot of admin overhead