5.0 Enable and Configure Permission Reconciliation Service

Enabling Permission Reconciliation Service helps you to create custom entitlements for connected system roles or resources in order to synchronize the connected application’s permission assignment changes to the Identity Manager resource catalog.

You must have Resource Administrator role to configure Permission Reconciliation settings.

To view system resources, go to Administration > Resources. For more information, see View and Manage Resources.

To add or modify the permission reconciliation settings of connected applications, go to Administration > Permission Reconciliation. For more information, see Section VI, Controlled Permission Reconciliation Services.

By default, Permission Reconciliation option is enabled.

Following options control the information synchronization and its retention period between connected applications and Identity Manager resource catalog:

Polling time for status checker

Specifies the time interval in minutes to check the permission reconciliation status. This polls the status of requests that are under process for the specified period and updates the system.

By default, this interval is set to 60 minutes.

Retention time for computed permission assignments

Specifies the period in days to retain permission assignments that are reconciled.

By default, this period is set to 7 days.

Click Submit to apply the configured settings.