Create a role
Quick answer
Step-by-step: model and create a business or IT role in SailPoint IdentityIQ and set how it is assigned.
Key takeaways
- Pick business vs IT role
- IT roles hold entitlements; business roles group IT roles
- Assign by rule or make requestable
- Set an owner and certify the role
1. Decide the role type
Choose a business role (job function) or an IT role (entitlement bundle). Business roles group IT roles; IT roles hold the actual entitlements.
2. Define contents
For an IT role, add the entitlements or profiles on target applications. For a business role, add the IT roles it should grant.
3. Set assignment
Add an assignment rule on identity attributes for automatic assignment, or leave it requestable through Lifecycle Manager.
4. Owner and certify
Assign an owner and plan to certify membership and composition so the role stays accurate over time.
Want to learn this properly?
Our live, instructor-led SailPoint Training covers this hands-on, with real projects and a certification path.
Check your understanding
What does a business role contain?
- A. Raw entitlements only
- B. IT roles
- C. Connectors
- D. Audit events
Show answer
B. IT roles
Business roles group IT roles, which in turn hold entitlements.