Announcing Custom User Levels in all Identity Security Cloud suites

Managing administrative access in Identity Security Cloud shouldn't feel like fitting a square peg into a round hole. Until now, out-of-the-box user levels have often forced admins into compromises, granting either too much access or not quite enough, simply because the perfect middle ground didn't exist.

We heard your feedback. Roles like "Helpdesk" mean very different things depending on the organization.

That is why we are thrilled to announce Custom User Levels in all SailPoint Identity Security Cloud suites.

What’s Changing?

Custom user levels allow administrators to delegate administrative responsibilities while supporting least privileges by providing finer grained permissions to administrative functionalities within Identity Security Cloud. Supported Custom User Level permissions include access object (entitlements, roles, access profiles, and access history), identities, password, VAs, and more. We have plans to expand Custom User Levels to other areas of the admin experience.

Why This Matters:

• Achieve true least privilege: You can now ensure every user has exactly the access they need to fulfill their role—and no more. This brings the core value proposition of identity governance directly into the administration of Identity Security Cloud itself.
• Future-proof administration: As we continue to roll out new Identity Security Cloud features and capabilities, you can seamlessly add those new functionalities to the Custom User Levels you’ve already created, removing barriers to adoption.

With Custom User Levels, SailPoint Identity Security Cloud adapts to your organization's security posture, not the other way around.

This feature is now live in your environments.