Workflow Update and Certify Access for a Mover, Not trigger if identity only has birthright roles assigned

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

We have a workflow that has been created to trigger when either of two attributes change. In the workflow we have first > get access then implemented a loop > manage access to add all roles assigned to a particular identity to a list.

After all the roles are gathered, this campaign is created and automatically activated.

We want all organizational roles to continue being visible (only acknowledgeable) however we have two roles in production which we would like to omit from ALL certification campaigns. These are currently both enabled.

Ideally we would like no certification campaign to be triggered if the identity only has those two birthright roles.

This will help eliminate certification fatigue as well as unnecessary certification campaigns.

2

hi @abmcleann,

When you are getting access why can’t you use an HTTP operation to get the access for the once which need to be reviewed by using search based query. With this you will not get the birthright access and you can execlude the onces which has birthright access.

Thanks,
Uday

3

I will try this, thank you :slight_smile:

4

What API call would you recommend for Get Access?

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.