iam_explicit_user_roles

Flexera Users With Explicit Roles

What It Does

This policy template produces a report of all Flexera users in the organization that have roles directly assigned to them rather than through preferred indirect means such as group membership. Optionally, this report can be emailed.

Input Parameters

• Email Addresses - Email addresses of the recipients you wish to notify.
• Role Ignore List - A list of role names/IDs to not consider when checking users for explicit roles. Leave blank to report all users with any explicit roles.

Policy Actions

• Sends an email notification

Prerequisites

This Policy Template uses Credentials for authenticating to datasources -- in order to apply this policy you must have a Credential registered in the system that is compatible with this policy. If there are no Credentials listed when you apply the policy, please contact your Flexera Org Admin and ask them to register a Credential that is compatible with this policy. The information below should be consulted when creating the credential(s).

Credential configuration

• Flexera Credential (provider=flexera) which has the following roles:
  • iam_admin

The Provider-Specific Credentials page in the docs has detailed instructions for setting up Credentials for the most common providers.

Supported Clouds

• Flexera

Cost

This policy template does not incur any cloud costs.