I’m using Advance Policy in our IIQ environment. Other role/entitlement SOD policy are working fine showing the violations while request is getting raised but the Advance Policy doesn’t show any violations after raising access request.
Requirement - User should have access to Application 1 to get access to Application 2, if not then violation should occur.
Has anybody encountered such issue and if fixed then please tell me how you fixed it ?
Thanks in advance
This is by design. Advanced Policies don’t trigger the “interactive” type policies which prevent users from submitting an Access Request, as they are not necessarily based on user access. Advanced Policies can still be used in a detective manner, by detecting violations during the execution of the Refresh Identity Cube task with the “Check active policies” option enabled.
Hi
i have a similar issue.
As searching through forum i found: Re: Advance Policy - Doesn’t flag violation during an Access Request - Compass (sailpoint.com).
or here: Solved: Does Advanced Policy support Preventive Policy Evaluation? - Compass (sailpoint.com) neither a statement that this is by design not supperted.
From that statement it seems for me, that this should be supported.
Did this change? Can you maybe check again?
We really look into this feature for a couple of Use Cases.
I have a similar issue. Requirement is Application A should have been provisioned already for application B to be provisioned, if not end user has be alerted during the request process and stopped. Any Lead for solution is must is appreciated. Thanks