Role management
Quick answer
Designing and managing roles in SailPoint IdentityIQ: business vs IT roles, role modelling, assignment and role mining.
Key takeaways
- Business roles group IT roles for clarity
- Roles assign by rules or by request and approval
- Role mining suggests roles from real entitlements
- Owners and certifications keep the model clean
Business and IT roles
IdentityIQ separates business roles (what a person does) from IT roles (the entitlements that grant it). Business roles group IT roles, keeping access understandable.
Assignment
Roles are assigned automatically by assignment rules on identity attributes, or requested through Lifecycle Manager and approved.
Role mining
Role mining analyses existing entitlements to suggest candidate roles, accelerating a role model from real access patterns.
Governance
Roles have owners, and certifications review role membership and composition so the model does not drift into over-provisioning.
Want to learn this properly?
Our live, instructor-led SailPoint Training covers this hands-on, with real projects and a certification path.
Check your understanding
What groups IT roles into something the business understands?
- A. A policy
- B. A business role
- C. A workflow
- D. A certification
Show answer
B. A business role
Business roles group IT roles so access maps to job functions.