Will this certification type achieve the goal?

A bank is two years into an ongoing project to provide all access through roles. The bank is actively using roles and actively adding to their role model. They need to ensure that all roles include the correct entitlements.

Will this certification type achieve the goal? Solution: Account Group Membership Certification
A . Yes
B . No

View Answer

Answer: B

Explanation:

An Account Group Membership Certification is designed to certify group memberships within accounts, typically focusing on the validation of access within specific account groups (e.g., Active Directory groups).

This type of certification does not directly address the accuracy of role composition or the correctness of entitlements assigned within roles. Since the bank’s goal is to ensure that all roles include the correct entitlements, an Account Group Membership Certification is not suitable for this purpose.

Thus, the correct answer is B. No.

Reference: This conclusion is supported by the SailPoint IdentityIQ Certification Guide, which details the purpose and function of each certification type, highlighting that Account Group Membership Certification is not meant for role entitlement validation.