What defines an advanced certification in SailPoint IdentityIQ?

An advanced certification in SailPoint IdentityIQ is characterized by the requirement that all identities included in the certification possess the correct entitlements or roles. This means that the certification process ensures a thorough and comprehensive review of identities, confirming that they have the necessary access and permissions that align with organizational policies and compliance regulations. Ensuring the correct entitlements and roles is crucial for maintaining security and governance within the organization.

In this context, it is understood that certifications help organizations manage access risks and verify the appropriateness of user permissions. By focusing on verifying that identities are correctly associated with their entitlements or roles, advanced certifications play a pivotal role in upholding identity governance.

Other choices do not accurately reflect the definition of an advanced certification in this context. For instance, while compliance requests may trigger certifications, they are not the only avenue for initiating them. Furthermore, the frequency of reviews may vary and is not strictly defined as annual for all certifications. Lastly, advanced certifications are not limited to the highest-level roles, as all relevant identities are assessed for their appropriateness in terms of entitlements and roles. Thus, the focus remains on the correctness of identities’ access rather than on a specific subset of roles.