Role management
Designing and managing roles in SailPoint IdentityIQ: business vs IT roles, role modelling, assignment and role mining.
Designing and managing roles in SailPoint IdentityIQ: business vs IT roles, role modelling, assignment and role mining.
- Business roles group IT roles for clarity
- Roles assign by rules or by request and approval
- Role mining suggests roles from real entitlements
- Owners and certifications keep the model clean
Business and IT roles
IdentityIQ separates business roles (what a person does) from IT roles (the entitlements that grant it). Business roles group IT roles, keeping access understandable.
Assignment
Roles are assigned automatically by assignment rules on identity attributes, or requested through Lifecycle Manager and approved.
Role mining
Role mining analyses existing entitlements to suggest candidate roles, accelerating a role model from real access patterns.
Governance
Roles have owners, and certifications review role membership and composition so the model does not drift into over-provisioning.