Using Sunrise and Sunset Dates for Temporary Access

"Sunrise" and "sunset" dates are used to make roles and entitlements temporary – they determine when a role (or an individual user's access to a role or an entitlement) becomes active, and when it becomes inactive.

This feature offers an efficient, automated way to grant time-limited access to sensitive roles, roles that are seasonal or temporary, or access that for any reason is intended to have a limited duration, such as a short-term assignment to a different team or a special project.

IdentityIQ gives you two ways to use sunrise and sunset dates:

• On roles themselves, so that the role itself has a temporary duration.

• When a role or entitlement is granted to a specific user; in other words, the role itself may not have time limits, but a certain user's access to that role should have a limited duration.