Object reference
Quick answer
Reference to the core SailPoint IdentityIQ objects: Identity, Link, Application, Bundle, Entitlement, Policy and more.
Key takeaways
- Configuration and data are stored as objects
- Identity = person, Link = account on an application
- Bundle = role, ManagedAttribute = entitlement
- Policy, Certification, WorkItem hold governance state
Core objects
IdentityIQ stores configuration and data as objects. Knowing the main ones and how they relate is the key to reading and editing configuration confidently.
Identity and Link
An Identity is a person; a Link is an account on an application owned by that identity. Links carry the entitlements aggregated from the source.
Application, Bundle, Entitlement
An Application (source) defines a connected system; a Bundle is a role; ManagedAttribute/Entitlement represents a grantable permission.
Governance objects
Policy, Certification, WorkItem and WorkflowCase capture governance state such as violations, reviews, tasks and running processes.
Want to learn this properly?
Our live, instructor-led SailPoint Training covers this hands-on, with real projects and a certification path.
Check your understanding
What object represents a role in IdentityIQ?
- A. Link
- B. Bundle
- C. Application
- D. WorkItem
Show answer
B. Bundle
Roles are stored as Bundle objects.