Is this one of the IdentuylQ batch request types that can help meet this goal?

An organization is making a change at the regional level.

Many users of a financial system have incorrect entitlements. Some users are missing entitlements, and some users have excess entitlements. Work needs to be performed to clean up access.

Is this one of the IdentuylQ batch request types that can help meet this goal? Solution: Delete Entitlement
A . Yes
B . No

Answer: B

Explanation:

The "Delete Entitlement" batch request type is not designed for cleaning up access by correcting or updating entitlements in bulk. Instead, "Delete Entitlement" is used to remove specific entitlements from the system entirely, which may not be what is needed if the goal is to correct incorrect entitlements (e.g., removing excess entitlements while adding missing ones). For the scenario described, where users need their entitlements corrected, other batch processes such as "Update Entitlement," "Revoke Access," or specific role re-assignment processes would be more appropriate.

Reference: SailPoint IdentityIQ Batch Request Types Documentation

SailPoint IdentityIQ Administration Guide (Entitlement Management Sections)

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments