• Votes

    5

    SoD Policies need a periodic review process to satisfy audit ...

    From the customer: A required expiration/approval cycle for SOD policies: On a periodic basis (configurable), SoD policies will move to a “Review & Approval Required” ...

  • Votes

    9

    IG: Deprovisioning of granted Permissions by Business Role ...

    IG 3.0 seems not to provide a mechanism that causes deprovisioning of a granted permission that is deleted from a Business Role. There must be a way to achieve this. ...

  • Votes

    2

    Data Dictionary of attributes listing values & purpose

    The application needs a Data Dictionary providing a list of the attributes for User / Account / Group / Permission / Business Roles and their values & purpose within the ...

  • Planned

    2

    Capability Matrix per Authorization Assignment

    Provide a Capability Matrix (of IG left navigation Menu selections & privileges) per Authorization Assignment. (Global Administrator, Access Request Administrator, etc) ...

  • Votes

    2

    Report: Access Request and Approval report

    It is requested to have a report that shows a users requested permissions with requester and date, approver(s) and date(s), fulfilment verified date.

  • Votes

    4

    Report: Users permissions with reason

    It is requested to have a report that shows a users permissions with information of reason for having it e.g. Part of a business role (which), requested (requester) or ...

  • Votes

    1

    IG Business Role grace-period revocation report

    A customer has asked for some type of report showing the Users part of Business Roles that have permissions in the status of pending the revocation when the 'Auto revoke ...

  • Votes

    3

    Advanced search for groups

    In the Groups part of IG you can only search using the name. It would be nice if one could search using all attributes on a group such and use AND/OR when searching for ...

  • Planned

    11

    Advanced search and filtering sorting for Fulfillment Requests and ...

    If you many manual fulfullment requests it's hard to navigate the Fulfillment Requests page. I can't sort by Task or by Source. It would be nice if the search could be ...

  • Votes

    7

    Act on missing identities after collecting/publishing

    A potential customer would like to use an identity source that is actually a database view containing only active identities. It is not possible to add historical records ...

  • Votes

    6

    Report: Users permissions changed within date range

    It would be helpful if there was a report that would display permission changes within a date range - and if there were selection fields that include filter by person who ...

  • Votes

    5

    Add ability to make list of review items larger than 100 items

    We have reviews with thousands of review items. Reviewers can sort or group by certain attributes that assist in determining to keep or remove. Allowing the ability to ...

  • Planned

    4

    Select All Behavior change

    If you have a list of review items that is greater than 100, which is the current maximum number of items that can be displayed on the screen, select all does not select ...

  • Votes

    3

    Display selected Modify Action in Amber

    The default color for the Modify text is dark grey. We currently have the following color definition for Modify in our custom.css file: .actionTaken.modify_access{ ...

  • Votes

    5

    IGA limiting snapshot sizes for database retention

    Are there ideas in place for future releases to limit how fast the db grows with snapshots... Such as having a master snapshot that isn't touched and then just have ...

  • Votes

    7

    We would like a report showing Users in Business Roles over time - ...

    We would like a report showing Users in Business Roles over time - delta snapshot. There is a “Permissions Delta by User” and backing view support on Permissions. I ...

  • Votes

    5

    Importing Identity Collector Changes Across Environments

    There is a need for a better way to manage importing identity collector changes from one environment to the next

  • Votes

    4

    Within a Business Role, I would like to permit a permission that is ...

    We have a requirement for business roles to have permission with different values that are dynamically calculated.

  • Votes

    5

    More sophisticated application-specific business role and permissions ...

    Unit administrators at U-M determine the logic of who should be eligible for various permissions. Today, all changes go through central IT because there is no way for a ...

  • Votes

    10

    Improve handling of identities with multi-valued/multi-affiliation ...

    Better handling of identities with multi-dimensions - faculty of dept x; staff of dept y also a student. Creating membership expressions using multi-valued packed data ...