We love to hear your ideas for improving Identity Governance (IG).

 
209 Ideas
139 Comments
908 Votes
  • Votes

    5

    Importing Identity Collector Changes Across Environments

    There is a need for a better way to manage importing identity collector changes from one environment to the next

    Comments (2) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    5

    Ability to Direct Emails to Vice President, Receive VP Name as ...

    Need to have the ability within the Review Notification definition to direct emails to a Reviewer's Vice President, in the same way that we can send a carbon copy (CC) to ...

    Comments (0) | by: Bob W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    Add ability to make list of review items larger than 100 items

    We have reviews with thousands of review items. Reviewers can sort or group by certain attributes that assist in determining to keep or remove. Allowing the ability to ...

    Comments (0) | by: Eric D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    More sophisticated application-specific business role and permissions ...

    Unit administrators at U-M determine the logic of who should be eligible for various permissions. Today, all changes go through central IT because there is no way for a ...

    Comments (0) | by: Victoria G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    SoD Policies need a periodic review process to satisfy audit ...

    From the customer: A required expiration/approval cycle for SOD policies: On a periodic basis (configurable), SoD policies will move to a “Review & Approval Required” ...

    Comments (1) | by: Eric P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    4

    Select All Behavior change

    If you have a list of review items that is greater than 100, which is the current maximum number of items that can be displayed on the screen, select all does not select ...

    Comments (0) | by: Eric D. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    4

    Within a Business Role, I would like to permit a permission that is ...

    We have a requirement for business roles to have permission with different values that are dynamically calculated.

    Comments (0) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    4

    Report: Users permissions with reason

    It is requested to have a report that shows a users permissions with information of reason for having it e.g. Part of a business role (which), requested (requester) or ...

    Comments (1) | by: Ken W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    3

    Ability to record delegated (onBehalfOf) permissions and certify them

    Many systems (such as exchange) have delegated permissions. Using MS Exchange as the example the ability to review mailbox and calendar delegate access/permissions is ...

    Comments (0) | by: Marcus V. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    3

    Add Review End Date as a Notification Parameter

    Currently we receive such data as the certifierFullName, reviewLink, taskTimeoutDays, etc. as parameters in our Notification emails. We would like to see the Review End ...

    Comments (0) | by: Bob W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    3

    Display selected Modify Action in Amber

    The default color for the Modify text is dark grey. We currently have the following color definition for Modify in our custom.css file: .actionTaken.modify_access{ ...

    Comments (0) | by: Bob W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    3

    Advanced search for groups

    In the Groups part of IG you can only search using the name. It would be nice if one could search using all attributes on a group such and use AND/OR when searching for ...

    Comments (0) | by: Aleksandar M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    2

    Report: Access Request and Approval report

    It is requested to have a report that shows a users requested permissions with requester and date, approver(s) and date(s), fulfilment verified date.

    Comments (1) | by: Ken W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    2

    advanced business role authorization logic

    Expand business role authorization logic to include if statement logic to determine the highest level qualifying permission authorized for an Application. For example: ...

    Comments (0) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    2

    Data Dictionary of attributes listing values & purpose

    The application needs a Data Dictionary providing a list of the attributes for User / Account / Group / Permission / Business Roles and their values & purpose within the ...

    Comments (0) | by: Jim M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    2

    Capability Matrix per Authorization Assignment

    Provide a Capability Matrix (of IG left navigation Menu selections & privileges) per Authorization Assignment. (Global Administrator, Access Request Administrator, etc) ...

    Comments (1) | by: Jim M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    IG Business Role grace-period revocation report

    A customer has asked for some type of report showing the Users part of Business Roles that have permissions in the status of pending the revocation when the 'Auto revoke ...

    Comments (1) | by: Joseph S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    1

    Hold off on sending email notifications until audit is available

    With audit startup, there is a race where emails go out while the audit is still generating; on large audits, the audit generation can take quite a while, and so the ...

    Comments (1) | by: Albert C. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Better Separation of Duties Handling and Permission Tracking

    "When there is a SoD condition and the resolution calls for the revoking of a Permssion X from Application Y which a user is entitled to as part of a Business Role, ...

    Comments (0) | by: aimee l. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Allow trailing spaces in membership expressions

    I have found cases where we need a membership expression to be along the lines of: Field X contains "course ENG " But currently we get results like "course ENGL" ...

    Comments (0) | by: Victoria G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other