Skip all roles for Company

Identity Security Cloud (ISC) ISC Discussion and Questions
1

We’re setting up a list of Access Policies and Roles for various birthright activities. currently just AD groups. The IdentityNow Bulk AccessProfile and Role Importer is working great for us.
One of the overriding requirements is for any user in a certain company(let’s say Oracle), shouldn’t get any groups. Company is an AD attribute.
Is there a better way to do that rather than just add a ‘company does not contain Oracle’ to every Rule?

Thanks,
Chris

2

I think your approach of adding the criteria “company does not contain Oracle” to every role is the correct way.

1 Like
3

@colin_mckibben Thanks. That seems to be working. Just working through the 25+ roles, and making sure the And/Or combinations all work.

Chris