Is the following statement true? Solution: All Application objects must have an Identity object as the owner.

The statement is false. In SailPoint IdentityIQ, the owner of an Application object is not required to be an Identity object. An Application's owner can be either an individual Identity or a Workgroup. A Workgroup is a named list of identities, often used to assign shared responsibility for governance tasks. This flexibility allows organizations to assign ownership to a team or functional group, ensuring that responsibilities like certifications, policy violation reviews, and approvals are not dependent on a single person. The system is explicitly designed to accommodate both types of owners.

A. Yes: This is incorrect because it presents an absolute condition that is not true. The system allows a Workgroup to be assigned as the owner of an Application object, in addition to an Identity.

1. SailPoint IdentityIQ 8.1 Administration Guide: In the "Application Configuration" chapter, under the section describing the fields for defining an application, the "Owner" attribute is detailed. The documentation states, "The application owner can be an identity or a workgroup." This directly confirms that ownership is not restricted to Identity objects.

2. SailPoint IdentityIQ 8.3 - Describing and Configuring Applications PDF: On page 10, in the table describing the "Application Attributes," the entry for "Owner" specifies its purpose as "The owner of the application. Can be an identity or a workgroup." This explicitly refutes the claim that the owner must be an Identity.

3. SailPoint IdentityIQ 7.2 - Certifications PDF: In the section on "Application Owner Certifications," page 10 explains the process: "Application Owner Certifications are work items created for each application included in the certification definition. The work item is assigned to the owner of the application, either an identity or a workgroup." This illustrates a core governance process that relies on the owner being either an Identity or a Workgroup.