I have a service account that doesn’t have a few Access Profiles that they should have.
I believe that when SailPoint detects an identity with entitlements that match an Access Profile, it will assign that Access Profile automatically to the identity. This identity had a bunch of APs that were deleted on September 12th and removed from the identity. But then they re-created the APs on September 23rd and I can see in the identity events where the APs were added back to this service account identity. However, there are a few Access Profiles that did not get added back. I tried clicking ‘Apply Changes’ on the Access Profile page as well as processing the identity manually but neither seemed to do anything to resolve the issue.
I’m not sure how many service accounts are involved, but have you tried using the “processing identity” options for one of them to see if that reassigns the missing access profiles?
@ajmerasunny , has a good idea that’s worth trying. But if it doesn’t work, and you’ve verified that the entitlements are getting assigned to the identities, and that all the APs are enabled, it may be time to open a support ticket.
