Segments not working as expected

iamnithesh · September 29, 2026, 5:35pm

I need help to set up a segment so that only a group of users can request for few entitlements in AD. I have created a test segment and assigned to single identity, and added 3 entitlements from AD. These entitlements are set as requestable too.

However, another user who is not part of the segment can see these entitlements in the request center. There is no other segment having these entitlements.

Based on what is described in this document, Managing Access Request Segments - SailPoint Identity Services only identities under the segment should see these entitlements in the request center

UjjwalJain · September 29, 2026, 5:47pm

Hi @iamnithesh,

Does the other user has admin privileges ?

iamnithesh · September 29, 2026, 5:58pm

Hi @UjjwalJain Yes the second user is ORG_ADMIN

Is that the reason? I could not find anywhere in the document which says ORG_ADMINs are not affected by the segments (because they are Gods!!)

David_Norris · September 29, 2026, 6:38pm

Topic		Replies	Views
Non Admin user are not able to request entitlement from request center SHF Discussion and Questions identity-security-cloud	5	101	March 25, 2026
Can org admins see roles which are in a segment but they're not a part of it during access requests? SHF Discussion and Questions identity-security-cloud , roles , access-requests	2	280	November 17, 2023
Restricting a Role to Be Requestable Only by a Limited Group of Identities SHF Discussion and Questions identity-security-cloud , access-requests , entitlements	3	287	January 28, 2025
Hide all requestable entitlements in IDN. So, that it should not be requested from IDN SHF Discussion and Questions identity-security-cloud	6	340	December 19, 2024
Segments feature overridden by on-behalf of others SHF Discussion and Questions access-requests	3	750	March 20, 2023

Segments not working as expected

Related topics