Segmentation: Limits on how many access items can be added?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello,

I have 2 questions related to segmentation for access requests in IdentityNow:

  1. What is the maximum numbers of access items (total of roles + access profile + entitlements) that can be added to 1 segment?
  2. Does ServiceNow Service Catalog integration also have the access request segmentation feature? OR is it only available in IdentityNow UI?

Thank you,
Shail

2

Hi Shail,

There shouldn’t be any limit to the number of access items that you can assign to a segment. However, per the segment docs, you can only add up to 50 access items to a segment at a time.

3

Thanks for that, we are looking at assigning 60k entitlements to one segment. You wouldn’t have a concern about it?

Here’s what I got from some other conversations I’ve had, anything official about these?

500 segments per tenant
100 visible segments per identity
20000 entitlements with at least one segment
100 assigned segments per access profile / role / entitlement

Thanks,
Shail

4

I have seen these limits internally, but not sure if they are still up to date. The answer I got from engineering is that there shouldn’t be a limit on number of access items that can be added to a segment. If you find that is not the case, please let us know so we can either update our limit documentation or get the limit increased.

5

Hi @colin_mckibben

50 is still showing as a limit for us. Pls advise.

image
image1462Ă—232 17.7 KB

6

That is saying you can’t save more than 50 access items in a single request. You will need to make multiple requests to get more than 50 access items into your segment.

1 Like
7

Is this a hard limit on number of items per segment or something that can be extended ?

8

It’s a hard limit per request. To get around this, select the first 50 items and save. Then select the next 50 items and save. Repeat until you have all the access items you want.

9

Hi Shail,

Did you ever find out an answer for no.2?

Thanks

10

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.