Ability to provide additional capabilities on Manage Access Page

Administration & Troubleshooting
1

Hello,

We have a requirement for a specific workgroup to manage user access for individuals with a particular application account. This workgroup consists of Level 2 approvers/role owners for the roles associated with the specified application, and they would like the ability to manage access for all users who have access to that application.

We are seeking suggestions on how to implement this functionality. We have attempted to use capabilities, but this approach has resulted in granting additional rights to the workgroup members.

Any thoughts or ideas you may have would be greatly appreciated.

Thanks,

Maneesh.B

2

@mbommakanti3298  we can achieve this using quicklink populations. You can create a new population, assign the manage user access link to them and using request object selector rules you can specify what entitlements/roles to remove or add and which identities can be part of this

3

@mbommakanti3298 Looks like we are discussing the same issue here as well: Ability to provide additional capabilities on Manage Access Page - IIQ Discussion and Questions - SailPoint Developer Community