Skip to main content

Incomplete roles

Purpose: Identify roles that have users with too many surpluses or deficits.

Which roles have many users that, in turn, have many out-of-role entitlements? How many out-of-role entitlements do users assigned each role have, on average? This suggests either incomplete role definitions (add entitlements) or users that do not fit well into a role model.

Executable: roleincomplete

Table 1. Incomplete roles report search criteria

Criteria

Description

Roles

Select one or more roles to include in the report.

Minimum number of users

Filter out rows that have less than the specified threshold value for number of users with the role.

Lower bound on the average number of out-of-role entitlements held by users in the role

Filter out rows that have less than the specified threshold value for average number of out-of-role (surplus) entitlements.

Summarize report

Select this checkbox to summarize the report details.