User not being added to Role when user has multiple accounts on the same source

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello All,

I have run into an interesting case where we have a Source for Assignments in SecZetta. The user has 2 active assignments for SecZetta that are both populating on the Cube. We have role being built out to add the needed access based on the assignment that a user has. The issue we are running into is that when the Role Engine runs it appears that it is doing a first valid when applying the roles.

In this example the user should of had both roles assigned to them. The logic being used by the 2 roles is rather open and should catch the user with the two accounts. The logic is working as expected when a user has 1 assignment. Any ideas why this would be happening?

image
image1711×118 6.61 KB

image
image1344×1551 80.1 KB

image
image1355×1525 81.2 KB

2

On your last set of criteria, you might try changing from “Equals” to “Contains”.

Alicia

3

Sailpoint documentation when user has multiple account on a source:

When an identity has multiple accounts on a source, you can specify the criteria for determining which of the user’s accounts should receive the access in automated provisioning. These criteria are not applied for users with only one account on the source.

4

Thank you for the suggestion! No luck though. Same results.