Policy violation on future access

Implement & Extend
, , ,
1

Hello,

I want to simulate policy violation on an identity by assigning conflicting entitlements/roles (similar to future identity) via rule.

Are there any suggestions how to achieve it? I know about policyexecutor.evaluate method, but it simulate on existing accesses.

2

Hi  @Paul_Meyer   @kalyankumar_saha   @ajmerasunny   @daniel_neubert   @vishal_kejriwal  , Could you please provide leads.

3

You can use Provisioner.impactAnalysis() method to get an dummy Identity with the new conflicting accesses added to it (not provisioned directly onto target) and then use executor.evaluate() method.

4

Hi  @kalyankumar_saha  ,

This method isn’t working for Role assignment, can you please suggest any other way.

new AttributeRequest(“assignedRoles”,ProvisioningPlan.Operation.Add,<Role Name>);