Does this statement accurately describe how roles are acquired by users in the default role model configuration? Business roles can only be requested…

In the default configuration of SailPoint IdentityIQ's Lifecycle Manager, access requests are not restricted to managers. The system is designed to support self-service, allowing end-users to browse an access catalog and request business roles and other entitlements for themselves. While managers can also be configured to request access on behalf of their direct reports, this is not the exclusive method. The default behavior is more permissive, enabling both self-service and manager-initiated requests.

A. Yes: This is incorrect. The default IdentityIQ configuration enables self-service access requests by end-users, which is a core feature of Lifecycle Manager.

1. SailPoint IdentityIQ 8.1 User's Guide, "Chapter 3: Requesting and Tracking Access," p. 17. "You can request new access for yourself or for other users for whom you have been given the authority to make requests."

2. SailPoint IdentityIQ 8.3 Administration Guide, "Chapter 11: Lifecycle Manager," Section: "Access Request Population," p. 329. Describes configurations for requesting for self vs. others, implying self-service is a standard option.