Sailpoint Identityiq查找连接器
我是Sailpoint Identityiq的新手。
如何找到在汇总和认证期间过滤掉只读权利的连接器?
感谢您的帮助!
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
我是Sailpoint Identityiq的新手。
如何找到在汇总和认证期间过滤掉只读权利的连接器?
感谢您的帮助!
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
接受
或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
发布评论
评论(2)
在组汇总期间,您可以使用规则来修改所找到的完整,包括使其请求是否可请求,修改其名称或将其排除在Identityiq之外。该规则附加到组聚合任务。
您可以在Sailpoint社区中参考这篇文章:
基本上,在您的组聚合任务中,可以选择/创建规则。您可以创建一个新规则来完成所需的逻辑。 Identityiq将每组对象都调用您的规则,如果您返回NULL,则将忽略该组。或者,您可以修改对象(例如,更改其名称或描述)并将其返回。
您可以在规则编辑器接口中查看参数IdentityIQ提供。您确实在规则中返回的那些组,成为Identityiq中的“权利”对象。
对于认证,您可以分配规则以选择要认证的内容。在广告系列设置中,Identityiq仅仅认证权利对象。当它找到一个不符合权利的组时,该组称为“额外权利”,并且有一个复选框将其包括或将其包括在认证中。
因此,如果您已经在小组聚合规则中不需要小组,则可以将其设置为排除其他权利。
During group aggregation, you can use a rule to modify the entiries found, including to make them requestable or not, modify their names, or to exclude them from IdentityIQ. This rule is attached to the group aggregation task.
You can refer to this article in SailPoint Community:
https://community.sailpoint.com/t5/Technical-White-Papers/Group-Aggregation-Data-Flow/ta-p/79070
Basically, in your group aggregation task, there is a dropdown to select/create a rule. You can create a new rule to do the logic you want. IdentityIQ will invoke your rule once per group object found, and if you return null, the group will be ignored. Or you can modify the object (change its name or description for example) and return it.
You can see the parameters IdentityIQ provides in the rule editor interface. Those groups you do return in your rule, becomes "Entitlement" objects in IdentityIQ.
For certification, you can assign a rule to select what you want to certify. In the campaign settings, IdentityIQ only certifies entitlement objects only. When it finds a group that is not an entitlement, that group is called "Additional Entitlement", and there's a checkbox to include or exclude it in the certification.
So if you already took care of groups you don't want in your group aggregation rule, for certification you can simply set it to exclude additional entitlements.
以下是:
Here are the steps: