SAILPOINT-CERTIFIED-IDENTITYNOW-ENGINEER · Question #10
An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access. After a recent…
The correct answer is B. No. No, deleting the access profile is not the correct way to meet the requirement of removing approval for access requests. The access profile defines the entitlements and permissions that users can request for an application. Deleting it would remove the entire ability to request…
Question
An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access. After a recent staff meeting, management has expressed that they want to remove any approval requirements for this application. Is management's request possible in IdentityNow. and. if so. are these the recommended steps the engineer should take to meet their new requirement? Solution: It is possible. Delete the access profile.
Options
- AYes
- BNo
How the community answered
(51 responses)- A20% (10)
- B80% (41)
Explanation
No, deleting the access profile is not the correct way to meet the requirement of removing approval for access requests. The access profile defines the entitlements and permissions that users can request for an application. Deleting it would remove the entire ability to request access, rather than just removing the approval workflow. The correct step would be to modify the approval settings in the access profile (as explained in Question 44), not to delete it. Key Reference from SailPoint Documentation: Access Profile Management: Modifying approval settings in the access profile is the appropriate step to meet management's new requirement, not deleting the profile itself.
Topics
Community Discussion
No community discussion yet for this question.