Access package policy for dynamic assignment
The ability to have a policy to dynamically assign access packages automatically to users, based on criteria / filters is very important, as this will greatly improve an organizations ability to provide a set of default access packages to their users based on division, company, etc.
Marius Solbakken commented
@michael - Other IGAs have a feature where access reviews for automatically assigned permissions are "Accepted" rather than "Reviewed" by the person doing the access review, meaning that he does get the user listed with the role, but unable to do anything about it other than accepting that it is there :)
Michael Brine commented
This is a great idea, this could be achieve using Dynamic Security Groups and assigns these to the resources to want allotted by default.
Though an issue with this approach is that your likely to manage access to the resource via Access Packages and Dynamic security groups making auditing difficult as Access review would return results from both Dynamic Security groups and Access Package and not allow either to process the final review decision.