SAILPOINT-CERTIFIED-IDENTITYIQ-ENGINEER · Question #36
An organization is making a change at the regional level. Many users of a financial system have incorrect entitlements. Some users are missing entitlements, and some users have excess entitlements…
The correct answer is B. No. The "Delete Entitlement" batch request type is not designed for cleaning up access by correcting or updating entitlements in bulk. Instead, "Delete Entitlement" is used to remove specific entitlements from the system entirely, which may not be what is needed if the goal is to…
Question
An organization is making a change at the regional level. Many users of a financial system have incorrect entitlements. Some users are missing entitlements, and some users have excess entitlements. Work needs to be performed to clean up access. Is this one of the IdentuylQ batch request types that can help meet this goal? Solution: Delete Entitlement
Options
- AYes
- BNo
How the community answered
(56 responses)- A20% (11)
- B80% (45)
Explanation
The "Delete Entitlement" batch request type is not designed for cleaning up access by correcting or updating entitlements in bulk. Instead, "Delete Entitlement" is used to remove specific entitlements from the system entirely, which may not be what is needed if the goal is to correct incorrect entitlements (e.g., removing excess entitlements while adding missing ones). For the scenario described, where users need their entitlements corrected, other batch processes such as "Update Entitlement," "Revoke Access," or specific role re-assignment processes would be more appropriate. SailPoint IdentityIQ Administration Guide (Entitlement Management Sections)
Topics
Community Discussion
No community discussion yet for this question.