OpenText NetIQ Identity Governance Community

Add the capability to request creation of a new permission (new ad group, new ldap group, etc)

gogga

It would be beneficial to have the ability to request the creation of a new AD group or new LDAP group directly from within IGA. We are moving our logical access request system from CA Unicenter to IGA, but we will have to keep the request for creating…
- 10 months ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Cyclic check in admin delegation mappings (Policy/Delegation)

Sjoerdk

When you are an end user it is possible to add a delegation. When you add a cyclic delegation (A -> B, B -> C, C -> A) IGA gives you an error. This is fine. In the admin screen however, this check is not in place. You can add cyclic delegations as admin…
- over 1 year ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Technical Role - Add Permission with dynamic value (resource)

TobiasR

Hello, please add the possibility to add permissions with dynamic values (for example an group membership resource/entitlement) to technical roles. Currently you can request the permission, but you can not add the permission to a technical role. …
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Permission Removed from Role needs to be cleaned up or noted if not

Slade Perry

When a permission is not set to auto revoke on a role and is removed from a role. that permission is not cleaned up off of the users. At this point there is no explanation on why the user has the permission or why its still there. Whenever a permission…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Allow Business Role to Own Reviews and Applications

Louis Utsch

I would like the same person to be both an app owner and a review owner, and if I can make a business role the owner of both, I can then just update my business role, and then both app and review will be up-to-date. We will have potentially 300 applications…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Remove Permissions from Roles from the Permission catalog page

Slade Perry

When a permission is added to a group of business Roles the only way to remove that permission from the roles is going to each individual role. If a permission is being deprecated and you need to remove it from multiple roles there should be a way to…
- over 2 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Business Role Mining - Attribute Selections

Chris Schaut

The Business Role mining search should allow (not require) specifying the values on the attributes selected. There are instances where a sub-selection is required, and it is unnecessary or prohibitively slow to perform over the entire Identity population…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
IG Technical Role Automated Resource Add

Chris Schaut

Technical Roles in IG. So we have an application where we are always adding new practices in but the security groups are always the same but just tied to that practice. Ex Practicename_SecurityGroup I need a way to grant ALL practices for one Security…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Notification on Business Role change approval approved/denied

Sjoerdk

When a business role is changed by a business role manager, an approval is sent to the business role owner. This leads to a notification to that owner that the owner needs to approve/deny the change. However: there is no feedback notification when the…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Functionality to archive older Requests and Reviews

Yogesh Mishra

There should be functionality of archiving older Requests and Reviews ,which are older than specific period let say 1 year to speed up system performance.
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Business Role Permission-to-Application relationship NOT displayed in the role review

NY

While running a business role definition review, from the reviewers perspective, when they click the Action 'Review business role definition', when they review the Authorizations (permissions included in the business role), by clicking the link to see…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Business Role: Membership expression on the Authorized Permissions

Nihii

Hi, Instead of applying a membership expression on the Business role, applying the expression on the authorized permission would make sense. As the conditions might change from one permission to another. Thanks Nihii
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
require resource owner approval for resource to role changes

Norbert Klasen

As a resource/application owner I need to review all changes where "my" resources are added to business roles as auto-grant authorizations. This is to stop overeager business role owners giving their users to much power just to “make things work”…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Application Permission Review with Role Exclusion

NY

Hi, We are looking to launch permission review campaigns for permissions outside of a defined role, specific to an application. We will create business roles which will include permissions from a variety of applications; Example : Business role “Accounting…
- over 3 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas
Role Mining rsults - allow sort by Num Permisisons, Num Roles, Num Applications

Geoffrey Carman

When you role mine, the results are useful, but you can only sort on the # users column. It would be very helpful to sort also by the # permissions, # roles, and # applications columns. If i role mine and find that 6456 users have this pattern, but shared…
- over 4 years ago
- OpenText NetIQ Identity Governance
- Identity Governance Ideas

Menu

OpenText NetIQ Identity Governance

Add the capability to request creation of a new permission (new ad group, new ldap group, etc)

Cyclic check in admin delegation mappings (Policy/Delegation)

Technical Role - Add Permission with dynamic value (resource)

Permission Removed from Role needs to be cleaned up or noted if not

Allow Business Role to Own Reviews and Applications

Remove Permissions from Roles from the Permission catalog page

Business Role Mining - Attribute Selections

IG Technical Role Automated Resource Add

Notification on Business Role change approval approved/denied

Functionality to archive older Requests and Reviews

Business Role Permission-to-Application relationship NOT displayed in the role review

Business Role: Membership expression on the Authorized Permissions

require resource owner approval for resource to role changes

Application Permission Review with Role Exclusion

Role Mining rsults - allow sort by Num Permisisons, Num Roles, Num Applications

Resources

Menu

Popular Tags

Resources