Introduction to Roles, Workgroups, Populations, and Groups

IdentityIQ offers several ways to group Identities into sets, based on shared characteristics. Each type of grouping has a distinct purpose and offers unique capabilities. They include:

Roles

Roles model the organization's job functions, structure, and system entitlements, and present entitlement data in a way that is readily understood by non-technical reviewers . Through roles, entitlements can be grouped together and presented as a logical unit, such as a job function, rather than as a detailed and often difficult-to-interpret list of access rights.

Workgroups

Workgroups associate sets of Identities to make it possible to share responsibilities within IdentityIQ ; these responsibilities can include certification access reviews and ownership of application entitlements, among others.

Populations

Populations are query-generated lists of Identities that share a common set of attributes, such as location, department, risk score, et cetera; populations can be used to filter the set of identities that are included in a certification, task, or report.

Groups

Groups are sets of Identities created based on the value of a single identity attribute; groups can be used to filter the set of identities that are included in a certification, task, or report.