# \#accounts-entitlements

**URL:** https://community.sailpoint.com/discuss/tag/accounts-entitlements/65.md

[Latest](https://community.sailpoint.com/discuss/latest.md) · [Categories](https://community.sailpoint.com/discuss/categories.md) · [Tags](https://community.sailpoint.com/discuss/tags.md)

---

## [Access Profile Model/Structure](https://community.sailpoint.com/discuss/t/access-profile-model-structure/59678)

<div class="topic-metadata">

**Author:** [@minyi](https://community.sailpoint.com/discuss/u/minyi)\
**Replies:** 1\
**Last updated:** [October 15, 2026, 6:33pm UTC](https://community.sailpoint.com/discuss/t/access-profile-model-structure/59678 "2026-10-15T18:33:54Z")

</div>

Hi there, I wish to get some ideas on what the best approach to achieve the needed. I have Access Profile 1 and Access Profile 2, where user can only hold either of it at a time (I had a workflow mechanism to remove the…

---

## [Mitigate effects of attribute value changes in HRMS on birthright Role criteria](https://community.sailpoint.com/discuss/t/mitigate-effects-of-attribute-value-changes-in-hrms-on-birthright-role-criteria/59692)

<div class="topic-metadata">

**Author:** [@woodwardcoreyn](https://community.sailpoint.com/discuss/u/woodwardcoreyn)\
**Replies:** 3\
**Last updated:** [October 13, 2026, 5:10pm UTC](https://community.sailpoint.com/discuss/t/mitigate-effects-of-attribute-value-changes-in-hrms-on-birthright-role-criteria/59692 "2026-10-13T17:10:34Z")

</div>

1. What process or policy are you working on? Creating birthright roles granular enough for business use-cases while avoiding consequences of attribute value changes from our HRMS. 2. What is your question or current ch…

---

## [Application roles from Microsoft Entra not showing up as account entitlements](https://community.sailpoint.com/discuss/t/application-roles-from-microsoft-entra-not-showing-up-as-account-entitlements/59689)

<div class="topic-metadata">

**Author:** [@mauyeung](https://community.sailpoint.com/discuss/u/mauyeung)\
**Replies:** 1\
**Last updated:** [October 9, 2026, 3:19am UTC](https://community.sailpoint.com/discuss/t/application-roles-from-microsoft-entra-not-showing-up-as-account-entitlements/59689 "2026-10-09T03:19:34Z")

</div>

1. What are you trying to do or solve? We are trying to configure Microsoft Entra source on ISC and aggregate the application roles as entitlements. The entitlement details are aggregated but they do not show up as acco…

---

## [Certification Event Identity Trigger owner change](https://community.sailpoint.com/discuss/t/certification-event-identity-trigger-owner-change/59686)

<div class="topic-metadata">

**Author:** [@prahantMishra](https://community.sailpoint.com/discuss/u/prahantMishra)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 8:43am UTC](https://community.sailpoint.com/discuss/t/certification-event-identity-trigger-owner-change/59686 "2026-10-06T08:43:11Z")

</div>

1. What process or policy are you working on? Identity owner change certification event 2. What is your question or current challenge? I need to create an identity certification campaign for change owners, ensuring that…

---

## [Terminating aggregation task](https://community.sailpoint.com/discuss/t/terminating-aggregation-task/59456)

<div class="topic-metadata">

**Author:** [@gayathri](https://community.sailpoint.com/discuss/u/gayathri)\
**Replies:** 1\
**Last updated:** [June 8, 2026, 3:24pm UTC](https://community.sailpoint.com/discuss/t/terminating-aggregation-task/59456 "2026-06-08T15:24:17Z")

</div>

Could you guide me on how to terminate an aggregation task that has been stuck in Identity Security Cloud for an unusually long time?

---

## [Data Layer between the authoritative sources and the IGA tool](https://community.sailpoint.com/discuss/t/data-layer-between-the-authoritative-sources-and-the-iga-tool/59309)

<div class="topic-metadata">

**Author:** [@skohli](https://community.sailpoint.com/discuss/u/skohli)\
**Replies:** 4\
**Last updated:** [April 23, 2026, 3:20am UTC](https://community.sailpoint.com/discuss/t/data-layer-between-the-authoritative-sources-and-the-iga-tool/59309 "2026-04-23T03:20:19Z")

</div>

Hi Everyone, Has anyone used Radiant Logic as a layer before feeding data into an IGA solution Any insights on what it’s good at vs where it falls short would be really helpful. Currently, the client has an in‑house ET…

---

## [Need Help Setting Up an Entitlement SOD Policy](https://community.sailpoint.com/discuss/t/need-help-setting-up-an-entitlement-sod-policy/59210)

<div class="topic-metadata">

**Author:** [@karen\_delucia](https://community.sailpoint.com/discuss/u/karen_delucia)\
**Replies:** 3\
**Last updated:** [April 1, 2026, 12:02pm UTC](https://community.sailpoint.com/discuss/t/need-help-setting-up-an-entitlement-sod-policy/59210 "2026-04-01T12:02:38Z")

</div>

I’m trying to setup a policy (Entitlement SOD Policy) in IIQ 8.5 for the first time. I have no violation formatting rule set, no violation business process, no alerts. I click the ‘Create New Rule’ button and put some te…

---

## [Attribute Metadata is not getting updated for the old identity](https://community.sailpoint.com/discuss/t/attribute-metadata-is-not-getting-updated-for-the-old-identity/30367)

<div class="topic-metadata">

**Author:** [@adamitde7](https://community.sailpoint.com/discuss/u/adamitde7)\
**Replies:** 4\
**Last updated:** [March 8, 2026, 6:24pm UTC](https://community.sailpoint.com/discuss/t/attribute-metadata-is-not-getting-updated-for-the-old-identity/30367 "2026-03-08T18:24:12Z")

</div>

Hi, We had 2 source mapping for an identity attribute. One is from an authoritative source application and another is from Active Directory. We have removed mapping from Active Directory( Updated Identity.xml). However,…

---

## [Show provisioning policy form attribute values in approval workitem](https://community.sailpoint.com/discuss/t/show-provisioning-policy-form-attribute-values-in-approval-workitem/34218)

<div class="topic-metadata">

**Author:** [@hikumar](https://community.sailpoint.com/discuss/u/hikumar)\
**Replies:** 15\
**Last updated:** [March 8, 2026, 12:38pm UTC](https://community.sailpoint.com/discuss/t/show-provisioning-policy-form-attribute-values-in-approval-workitem/34218 "2026-03-08T12:38:00Z")

</div>

Is there an OOTB way to show the attribute information/values, gathered using provisioning policy forms while access request process, in approval workitem? Appreciate any inputs! @paulo\_urcid @sa8173 @vishal\_kejriwal @…

---

## [Does SailPoint Add-On Support SAP NetWeaver 7.50 with ECC 6.0 EHP8?](https://community.sailpoint.com/discuss/t/does-sailpoint-add-on-support-sap-netweaver-7-50-with-ecc-6-0-ehp8/59055)

<div class="topic-metadata">

**Author:** [@Bhumi22](https://community.sailpoint.com/discuss/u/Bhumi22)\
**Replies:** 5\
**Last updated:** [February 20, 2026, 12:14pm UTC](https://community.sailpoint.com/discuss/t/does-sailpoint-add-on-support-sap-netweaver-7-50-with-ecc-6-0-ehp8/59055 "2026-02-20T12:14:04Z")

</div>

Hello, We are currently working on extracting indirect entitlements from our SAP applications into SailPoint IIQ. While reviewing the vendor documentation, we noted that the function module /SAILPOIN/SAIL\_READ\_TABLE is …

---

## [SuccessFactors Connector Aggregating Primary Employment Not Working Randomly](https://community.sailpoint.com/discuss/t/successfactors-connector-aggregating-primary-employment-not-working-randomly/36956)

<div class="topic-metadata">

**Author:** [@minyi](https://community.sailpoint.com/discuss/u/minyi)\
**Replies:** 3\
**Last updated:** [February 16, 2026, 10:20am UTC](https://community.sailpoint.com/discuss/t/successfactors-connector-aggregating-primary-employment-not-working-randomly/36956 "2026-02-16T10:20:57Z")

</div>

Hi there, I have a SuccessFactors connector with aggregate primary employment option enable. This is working well most of the time but randomly for some of the IDs, it will stop working and aggregate the ID from non-pr…

---

## [JDBC Connector with Google BigQuery– "Simba driver does not support this feature"](https://community.sailpoint.com/discuss/t/jdbc-connector-with-google-bigquery-simba-driver-does-not-support-this-feature/36271)

<div class="topic-metadata">

**Author:** [@sitla001](https://community.sailpoint.com/discuss/u/sitla001)\
**Replies:** 3\
**Last updated:** [December 12, 2025, 11:40am UTC](https://community.sailpoint.com/discuss/t/jdbc-connector-with-google-bigquery-simba-driver-does-not-support-this-feature/36271 "2025-12-12T11:40:18Z")

</div>

Hi Everyone, I’m currently setting up a JDBC connector in SailPoint IdentityIQ to integrate with Google BigQuery using the Simba JDBC driver (com.simba.googlebigquery.jdbc42.Driver). What I’ve done so far: Deployed t…

---

## [Single value attribute issue - SalesForce connector](https://community.sailpoint.com/discuss/t/single-value-attribute-issue-salesforce-connector/37017)

<div class="topic-metadata">

**Author:** [@lgcastro](https://community.sailpoint.com/discuss/u/lgcastro)\
**Replies:** 2\
**Last updated:** [December 10, 2025, 5:58pm UTC](https://community.sailpoint.com/discuss/t/single-value-attribute-issue-salesforce-connector/37017 "2025-12-10T17:58:01Z")

</div>

Hello, We’ve been having a problem with the SalesForce connector, specifically with the attribute ProfileId, of type group. It’s a single value attribute on the application side, and has been configured as such in the s…

---

## [How do Sailpoint handle the termination of Workday Rescinding Hires](https://community.sailpoint.com/discuss/t/how-do-sailpoint-handle-the-termination-of-workday-rescinding-hires/36982)

<div class="topic-metadata">

**Author:** [@vsekar7](https://community.sailpoint.com/discuss/u/vsekar7)\
**Replies:** 1\
**Last updated:** [November 13, 2025, 8:58pm UTC](https://community.sailpoint.com/discuss/t/how-do-sailpoint-handle-the-termination-of-workday-rescinding-hires/36982 "2025-11-13T20:58:19Z")

</div>

How do Sailpoint handle the termination of Workday Rescinding Hires I have tried to add new account schemas as mentioned in the below document and getting the below error in account aggregation task: @ Rescinded and Co…

---

## [Limitations of Delta Aggregation in ISC for Workday Integration](https://community.sailpoint.com/discuss/t/limitations-of-delta-aggregation-in-isc-for-workday-integration/36962)

<div class="topic-metadata">

**Author:** [@Divya\_B77](https://community.sailpoint.com/discuss/u/Divya_B77)\
**Replies:** 2\
**Last updated:** [October 28, 2025, 1:45pm UTC](https://community.sailpoint.com/discuss/t/limitations-of-delta-aggregation-in-isc-for-workday-integration/36962 "2025-10-28T13:45:58Z")

</div>

Hi, We have integrated Workday with SailPoint ISC and configured delta aggregation to capture changes efficiently. However, we have observed that delta aggregation is not fetching some of the newly created accounts from…

---

## [Restarting tomcat did not cancel the stucked task](https://community.sailpoint.com/discuss/t/restarting-tomcat-did-not-cancel-the-stucked-task/36897)

<div class="topic-metadata">

**Author:** [@ksuneeth85](https://community.sailpoint.com/discuss/u/ksuneeth85)\
**Replies:** 3\
**Last updated:** [October 16, 2025, 12:00am UTC](https://community.sailpoint.com/discuss/t/restarting-tomcat-did-not-cancel-the-stucked-task/36897 "2025-10-16T00:00:56Z")

</div>

We have a linux servers aggregation task and it has been stuck and we did restart tomcat.The task is still pending after restart.normally all pending task will be cancelleted after tomcat restart.any idea ? how to kill t…

---

## [ISC : Entitlement Owner Review in Sailpoint IdentityNow](https://community.sailpoint.com/discuss/t/isc-entitlement-owner-review-in-sailpoint-identitynow/36784)

<div class="topic-metadata">

**Author:** [@AnkitaTanwar](https://community.sailpoint.com/discuss/u/AnkitaTanwar)\
**Replies:** 5\
**Last updated:** [September 22, 2025, 8:01am UTC](https://community.sailpoint.com/discuss/t/isc-entitlement-owner-review-in-sailpoint-identitynow/36784 "2025-09-22T08:01:44Z")

</div>

Hi, Trying to create a certification campaign for Entitlement Review with Entitlement Owner as reviewer. Is there a way we can make Entitlement Owner as reviewer of certificate in IdentityNow? Thanks, Ankita.

---

## [Capture any privileged Entitlement with more than three users](https://community.sailpoint.com/discuss/t/capture-any-privileged-entitlement-with-more-than-three-users/36751)

<div class="topic-metadata">

**Author:** [@pillar224](https://community.sailpoint.com/discuss/u/pillar224)\
**Replies:** 5\
**Last updated:** [September 10, 2025, 1:36pm UTC](https://community.sailpoint.com/discuss/t/capture-any-privileged-entitlement-with-more-than-three-users/36751 "2025-09-10T13:36:55Z")

</div>

I would like to somehow capture privileged Entitlements that have more than three assigned Identities. Those Entitlements and Identities would then either be returned in a report or end up in a Certification Campaign. Is…

---

## [Application Identification for Preview or Aggregation](https://community.sailpoint.com/discuss/t/application-identification-for-preview-or-aggregation/36653)

<div class="topic-metadata">

**Author:** [@venumgm235](https://community.sailpoint.com/discuss/u/venumgm235)\
**Replies:** 2\
**Last updated:** [August 21, 2025, 3:21pm UTC](https://community.sailpoint.com/discuss/t/application-identification-for-preview-or-aggregation/36653 "2025-08-21T15:21:04Z")

</div>

Hello Team, Have a small question, is there any way that we can identify whether the customization rule/buildmap rules are triggered with account aggregation aggregation or the account preview ? Thanks Venu

---

## [Attribute Sync for Boolean account attribute (SalesForce IsActive)](https://community.sailpoint.com/discuss/t/attribute-sync-for-boolean-account-attribute-salesforce-isactive/36582)

<div class="topic-metadata">

**Author:** [@imckenzie](https://community.sailpoint.com/discuss/u/imckenzie)\
**Replies:** 2\
**Last updated:** [August 5, 2025, 3:32pm UTC](https://community.sailpoint.com/discuss/t/attribute-sync-for-boolean-account-attribute-salesforce-isactive/36582 "2025-08-05T15:32:56Z")

</div>

Hi, I’m attempting to Attribute Sync an identity attribute to the SalesForce SaaS connector account attribute “IsActive”. The account attribute comes OOB as “BOOLEAN”. Identity attribute config (I was able to make a PUT…

---

## [Uncorrelated accounts - How to detect incorrectly correlated accounts - Theoretical scenario](https://community.sailpoint.com/discuss/t/uncorrelated-accounts-how-to-detect-incorrectly-correlated-accounts-theoretical-scenario/36369)

<div class="topic-metadata">

**Author:** [@InJhong](https://community.sailpoint.com/discuss/u/InJhong)\
**Replies:** 5\
**Last updated:** [July 28, 2025, 12:49am UTC](https://community.sailpoint.com/discuss/t/uncorrelated-accounts-how-to-detect-incorrectly-correlated-accounts-theoretical-scenario/36369 "2025-07-28T00:49:43Z")

</div>

Hello Everyone, I have a scenario(s) that I’d like to discuss options/thoughts on: Tightening existing controls and SLAs is one thing but I need to balance security and reasonable controls. Note: this might be an envir…

---

## [Unable to locate column config for \[accountGroupCamRolesTableColumns\]](https://community.sailpoint.com/discuss/t/unable-to-locate-column-config-for-accountgroupcamrolestablecolumns/25548)

<div class="topic-metadata">

**Author:** [@bidyutdas691](https://community.sailpoint.com/discuss/u/bidyutdas691)\
**Replies:** 5\
**Last updated:** [July 12, 2025, 1:02pm UTC](https://community.sailpoint.com/discuss/t/unable-to-locate-column-config-for-accountgroupcamrolestablecolumns/25548 "2025-07-12T13:02:54Z")

</div>

I have setup sailpoint as a docker container..I get the below error when I try to open any entitlement in IIQ 8.2p2. Checking in logs I get an error saying “Unable to locate column config for \[accountGroupCamRolesTableCo…

---

## [Special characters in RACF Group Names](https://community.sailpoint.com/discuss/t/special-characters-in-racf-group-names/36413)

<div class="topic-metadata">

**Author:** [@ricardo\_s\_araujo](https://community.sailpoint.com/discuss/u/ricardo_s_araujo)\
**Replies:** 4\
**Last updated:** [July 7, 2025, 4:23pm UTC](https://community.sailpoint.com/discuss/t/special-characters-in-racf-group-names/36413 "2025-07-07T16:23:06Z")

</div>

Hi experts, We are using the “RACF - Full” connector and when aggregating groups, special characters become #. example: group in the targer system(RACF) → ESPAÑOL group/entitlement in IdentityIQ → ESPA#OL we aready …

---

## [Workday Integration with SailPoint IdentityNow: Single Account Aggregation Fails](https://community.sailpoint.com/discuss/t/workday-integration-with-sailpoint-identitynow-single-account-aggregation-fails/36313)

<div class="topic-metadata">

**Author:** [@Divya\_B7](https://community.sailpoint.com/discuss/u/Divya_B7)\
**Replies:** 1\
**Last updated:** [June 10, 2025, 12:23pm UTC](https://community.sailpoint.com/discuss/t/workday-integration-with-sailpoint-identitynow-single-account-aggregation-fails/36313 "2025-06-10T12:23:57Z")

</div>

Hello, I have integrated Workday with SailPoint IdentityNow and completed all necessary configurations. Full account aggregation works as expected, and all user records are imported into SailPoint without issues. Howev…

---

## [Create account only in certain circumstances](https://community.sailpoint.com/discuss/t/create-account-only-in-certain-circumstances/36310)

<div class="topic-metadata">

**Author:** [@pillar224](https://community.sailpoint.com/discuss/u/pillar224)\
**Replies:** 4\
**Last updated:** [June 6, 2025, 10:36pm UTC](https://community.sailpoint.com/discuss/t/create-account-only-in-certain-circumstances/36310 "2025-06-06T22:36:32Z")

</div>

I want to create an account when a new Identity is created only under certain circumstances. For example, if an Identity’s department is x then create an account on x Source

---

## [Removing Duplicate Accounts After Schema Update](https://community.sailpoint.com/discuss/t/removing-duplicate-accounts-after-schema-update/36293)

<div class="topic-metadata">

**Author:** [@Divya\_B7](https://community.sailpoint.com/discuss/u/Divya_B7)\
**Replies:** 3\
**Last updated:** [June 5, 2025, 1:42pm UTC](https://community.sailpoint.com/discuss/t/removing-duplicate-accounts-after-schema-update/36293 "2025-06-05T13:42:37Z")

</div>

I had to change the account Name and account ID in the schema of an authoritative source. After doing this change and re-aggregating the source, duplicate accounts are created for the users- one with the old attributes a…

---

## [A problem with account aggregation: identity empty or null.](https://community.sailpoint.com/discuss/t/a-problem-with-account-aggregation-identity-empty-or-null/36082)

<div class="topic-metadata">

**Author:** [@acerralbog](https://community.sailpoint.com/discuss/u/acerralbog)\
**Replies:** 2\
**Last updated:** [May 29, 2025, 8:37am UTC](https://community.sailpoint.com/discuss/t/a-problem-with-account-aggregation-identity-empty-or-null/36082 "2025-05-29T08:37:24Z")

</div>

I am developing a custom connector which works with both a web service and a SQL database. When I push in the test connection’s bottom, it works properly. Also, I have configured its connection’s details and its accounts…

---

## [Manage account expiry for AD admin accounts](https://community.sailpoint.com/discuss/t/manage-account-expiry-for-ad-admin-accounts/36238)

<div class="topic-metadata">

**Author:** [@Saurabh-Kumar](https://community.sailpoint.com/discuss/u/Saurabh-Kumar)\
**Replies:** 2\
**Last updated:** [May 24, 2025, 11:00am UTC](https://community.sailpoint.com/discuss/t/manage-account-expiry-for-ad-admin-accounts/36238 "2025-05-24T11:00:50Z")

</div>

Hi, I have 2 AD sources - one provisioning standard AD account, another one provisioning Admin account. As per policy, admin accounts expiry can be maximum 6 months. This can only be extended 1 month before the expiry …

---

## [Controlling Attribute Sync Based on Start Date in SailPoint IdentityNow Integration with Workday](https://community.sailpoint.com/discuss/t/controlling-attribute-sync-based-on-start-date-in-sailpoint-identitynow-integration-with-workday/36226)

<div class="topic-metadata">

**Author:** [@Divya\_B7](https://community.sailpoint.com/discuss/u/Divya_B7)\
**Replies:** 2\
**Last updated:** [May 22, 2025, 4:41pm UTC](https://community.sailpoint.com/discuss/t/controlling-attribute-sync-based-on-start-date-in-sailpoint-identitynow-integration-with-workday/36226 "2025-05-22T16:41:07Z")

</div>

Hi, Is there a way to control the sync of certain attributes based on specific conditions? For example, once a user is onboarded into ISC from the Workday source as a pre-hire, a network ID is generated for the user. Ho…

---

## [Workday Account Aggregation : SocketTimeout Exception](https://community.sailpoint.com/discuss/t/workday-account-aggregation-sockettimeout-exception/35679)

<div class="topic-metadata">

**Author:** [@reddyc9](https://community.sailpoint.com/discuss/u/reddyc9)\
**Replies:** 5\
**Last updated:** [April 28, 2025, 9:32am UTC](https://community.sailpoint.com/discuss/t/workday-account-aggregation-sockettimeout-exception/35679 "2025-04-28T09:32:50Z")

</div>

Hi , We are experiencing an issue with scheduling the Workday Account Aggregation task. When executed manually, the task runs successfully. However, when we schedule it to run automatically, it succeeds on the second …

[Next page](https://community.sailpoint.com/discuss/tag/accounts-entitlements/65.md?match_all_tags=true&page=1&tags%5B%5D=accounts-entitlements)
