Labels

Access Request and Approval
76
Access Review and Certification
86
Analytics & Governance Insights and Repo...
32
Audit and Remediation
10
Configuration
196
Dashboard-Visualization
10
Dashboards-Visualization
28
Data Access Governance
2
Fulfillment and Provisioning
39
Identity and Entitlement Data Management
11
Identity Governance SaaS
0
Identity Intelligence
3
Identity Lifecycle Management
12
Identity Tracking
3
Installation-Deployment
10
Integrations
50
Role and Policy Management
15
Supported Platforms
1
Other
57
Idea ID: 2873891

Technical Role - Add Permission with dynamic value (resource)

TobiasR  
Status: Needs Clarification

Would like to go over this idea with you, please suggest some time slot to have the discussion around this. Thanks

See status update history

Hello,

please add the possibility to add permissions with dynamic values (for example an group membership resource/entitlement) to technical roles. Currently you can request the permission, but you can not add the permission to a technical role.

BR

Tobias

Parents
  •  

    Thank you for submitting the idea. We need more clarity on exact use case to be able to evaluate it further. 

    We will await your input regarding the same.

  •   in reply to Noureen Vishnani 

    In the IDM we have one dynamic resource for ActiveDirectory Groups. In the IG (we are using the IDM AE Permission Collector) we have this resource as a permission.

    If I request this permission in the self service I can select which specific ActiveDirectory group I want to request (as it should be)

    But it is not possible (checked again with version 3.7.3) to assign this AD group permission to a technical role. The permission doesn't show up in the search window and from that I can tell all the permissions with dynamic values are not shown and therefore can't assigned to a technical role.

    Regarding the use case: We only wanted to assign a ActiveDirectory group to a technical role , so when an user will request this role he also will get a specific AD group.

Comment
  •   in reply to Noureen Vishnani 

    In the IDM we have one dynamic resource for ActiveDirectory Groups. In the IG (we are using the IDM AE Permission Collector) we have this resource as a permission.

    If I request this permission in the self service I can select which specific ActiveDirectory group I want to request (as it should be)

    But it is not possible (checked again with version 3.7.3) to assign this AD group permission to a technical role. The permission doesn't show up in the search window and from that I can tell all the permissions with dynamic values are not shown and therefore can't assigned to a technical role.

    Regarding the use case: We only wanted to assign a ActiveDirectory group to a technical role , so when an user will request this role he also will get a specific AD group.

Children
No Data

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.