Targeted Certification Missing Users with Linked Entitlements

Hello All,

We are observing an issue that all the users who are having the links and the entitlements provisioned on the application are not coming under the targeted access review certification. Do not have any exclusion rule configured as such in the environment which will prevent this. Any pointer?

Hi @Shefali24

can you share the filter criteria that is being used in the targeted access review ?

Is the data not coming for all applications or only certain applications?

@Shefali24 Can you check identity.xml and make sure the exceptions tag is populated with the entitlements provisioned on the link (assuming these were provisioned outside of the role)? If not then please execute refresh task with the option to promote additional entitlements and recheck.

Thanks,

Pallavi

1 Like

Hi @Shefali24

Once run a fresh aggregation and refreshing the identities. If this is happening with a specific application, try generating an Application Owner Certification for it. Once that’s done, check if the identity shows up and has entitlements listed.

If the identity still doesn’t have the entitlements—then it’s likely something’s off at the identity level.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.