"Detecting" user-role association

[Community_User]

Originally posted on February 11 2020 at 16:45 UTC

Let say we create a new Role (call it MyRole) that is composed of 3 entitlements, in 2 different endpoints: EP1Ent1, EP1Ent2 and EP2Ent1

At Role creation, some users might already have that combination of 3 entitlements, or might have only 2 and then the third one is given via AccessRequest.

Question: is there a way within Saviynt to "detect" that these users should be assign MyRole? Some other products do have this notion of "detected" role (in opposition to role "assigned" within the IAM product).

[Community_User · Accepted solution]

Originally posted on February 12 2020 at 13:47 UTC

unfortunately received the following message from support:

No, currently there is no functionality to detect the Role a user should be assigned based on the entitlements user has.

An Enhancement Request has been open.