Hi,
we have this use case (IGL version is 7.1.1):
Users are collected from ldap.
When user TITLE is 'Administrator' (collected from ldap) they should be granted the entitlement System: Manage All.
How can we do it automatically without any manual approval/activity?
Thank you
You just need to create Administrator BRM role that has System: Manage All as entitlement. The membership rule will have title = Administrator
That was our initial solution, but it seems that the rule was never
triggered unless we manually executed it.
Il Gio 20 Feb 2020, 18:33 Pradeep Kadambar <no-reply@rsa.com> ha scritto:
<https://community.rsa.com/?et=watches.email.thread>
Re: Assign entitlement to Users automatically based on user attribute
reply from Pradeep Kadambar
in RSA Identity Governance & Lifecycle - View the full discussion
<https://community.rsa.com/message/949295?commentID=949295&et=watches.email.thread#comment-949295>
Typically, the rule should be scheduled to run after any collection. This way any change to identities will trigger the rule action to add or remove from roles.
Your behavior might be result of some misconfiguration.
Thank you,
we managed to solve the issue.
We didn't edit the rule configuration so every rule processing trigger was not checked.
We checked the role membership associated triggers and now everything is ok.
You just need to create Administrator BRM role that has System: Manage All as entitlement. The membership rule will have title = Administrator