User Level Access Matrix
User levels are sets of permissions within IdentityNow that administrators can grant to users. The following table shows the IdentityNow pages and components that are accessible from each user level. For information on how to grant and remove user levels, refer to Setting User Level Permissions.
Note
Multiple user levels can be granted to a user. The user's access is cumulative across all granted user levels.
IdentityNow and AI Services
Admin | Cert Admin |
Helpdesk | Report Admin |
Role Admin/ Sub‑admin* |
Source Admin/ Sub‑admin* |
Cloud Gov Admin/ Cloud Gov User |
End User |
|
Technical Name | ORG_ADMIN | CERT_ADMIN | HELPDESK | REPORT_ADMIN | ROLE_ADMIN ROLE_SUBADMIN | SOURCE_ADMIN SOURCE_SUBADMIN | CLOUD_GOV_ADMIN CLOUD_GOV_USER | |
Details | Details | Details | Details | Details | Details | |||
Admin | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ||
Dashboard | ✓ | ✓ | ✓ | ✓ | ||||
Overview | ✓ | ✓ | ✓ | ✓ | ||||
System Activity | ✓ | ✓ | ✓ | ✓ | ||||
Tasks | ✓ | ✓ | ✓ | ✓ | ||||
Monitor | ✓ | ✓ | ✓ | ✓ | ||||
Data Explore | ✓ | ✓ | ||||||
Identities | ✓ | ✓ | ✓ | |||||
Identity List | ✓ | ✓ ** | ||||||
Access History | ✓ | ✓ | ||||||
Identity Profiles | ✓ | |||||||
Outliers | ✓ | ✓ | ||||||
Governance Groups | ✓ | |||||||
Activities | ✓ | |||||||
Access | ✓ | ✓ | ✓ | |||||
Access Profiles | ✓ | ✓ * | ||||||
Roles | ✓ | ✓ * | ||||||
Role Insights | ✓ | ✓ | ||||||
Segments | ✓ | |||||||
Applications | ✓ | |||||||
Connections | ✓ | |||||||
Sources | ✓ | ✓ * | ||||||
Virtual Appliances | ✓ | |||||||
Integrations | ✓ | |||||||
Certifications | ✓ | ✓ | ✓ | |||||
Campaigns | ✓ | ✓ | ✓ | |||||
Campaign Filters | ✓ | ✓ | ||||||
Reassign Certifications | ✓ | ✓ | ||||||
Admin | Cert Admin |
Helpdesk | Report Admin |
Role Admin/ Sub‑admin* |
Source Admin/ Sub‑admin* |
Cloud Gov Admin/ Cloud Gov User |
End User |
|
Password Mgmt | ✓ | |||||||
Policies | ✓ | |||||||
Sync Groups | ✓ | |||||||
Global | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Reports | ✓ | ✓ | ✓ | ✓ | ✓ | |||
System Settings | ✓ | |||||||
Additional Settings | ✓ | |||||||
Security Settings | ✓ | |||||||
Email Templates | ✓ | |||||||
Event Triggers | ✓ | |||||||
Workflows | ✓ | |||||||
Search | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Saved Search Queries | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Certification Campaigns | ✓ | ✓ | ||||||
Policies | ✓ | |||||||
Reports | ✓ | ✓ | ✓ | ✓ | ✓ | |||
Role Discovery | ✓ | ✓ | ||||||
Dashboard Home | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Passwords | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Preferences | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Request Center | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Approvals | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Task Manager | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Certifications | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
*
Sub-admins can access these pages only if they are members of the governance group for the associated source. Sub-admins have the ability to search all organization data, not just data associated with their governance group.
**
Helpdesk Admins cannot manually set identity lifecycle states.
Cloud Governance Services
SailPoint Cloud Governance Services also include user levels to customize access.
Cloud Access Management
IdentityNow Admins can access Cloud Access Management if your organization has purchased and enabled it. IdentityNow Admins can also give other users access to Cloud Access Management by granting them the Cloud Gov User or Cloud Gov Admin user level.
Users with the Cloud Gov User (CLOUD_GOV_USER) user level can do the following:
- View source data and information in Cloud Access Managment
- Access IndentityNow with End User permissions
Users with the Cloud Gov Admin (CLOUD_GOV_ADMIN) user level can do the following:
- Access Cloud Access Managment
- Manage the sources page and add, edit, or delete cloud sources
- Perform manual inventory refreshes
- Access IndentityNow with End User permissions
SaaS Management
If your organization has purchased and enabled SailPoint SaaS Management, you can invite dashboard users to the application and assign them the Admin or Reader user level within SaaS Management.