See how Ramp uses ConductorOne
ConductorOne

ConductorOne Docs

Manage entitlements

Entitlements are the individual pieces of access a user can have on a system. Available entitlements vary by application, and can include access to groups, credentials, roles, and much more.

Use custom entitlement attributes

Entitlements have implications across access, security, and compliance. Often, this context is lost, or at best stored away in a separate database or spreadsheet. In ConductorOne, you can create custom risk levels and compliance framework tags, and apply these tags to entitlements. You can then sort and select entitlements for access reviews by compliance framework or risk level.

Step 1: Set your attribute values

  1. In the navigation panel, click Settings.
  2. Click Edit on the Attribute Values section of the page.
  3. In either the Compliance Framework or Risk Level field, type the name of the value you wish to add and press Enter.
  4. Repeat the process, adding additional attribute values as needed. Click the X next to any value to remove it from the list. Note that if you remove an attribute that is currently in use in ConductorOne, that attribute will not be removed from any entitlements it is assigned to.
  5. When you’re finished, click Save and confirm your action.

Step 2: Add attributes to entitlements

  1. In the navigation panel, click Applications.
  2. Select an application and click Entitlements.
  3. Select an entitlement. On the Details tab, in the Attributes area of the page, click Edit.
  4. Select the correct risk level for the entitlement, or select None.
  5. If applicable, select any compliance frameworks that apply to the entitlement.
  6. Click Save.
  7. Repeat this process on each applicable entitlement.

Set time limits on entitlements

To support least privilege access, you can choose to set a time limit on entitlements so that users are granted access for only a certain duration. At the end of the time limit, the user’s access will be automatically revoked.

  1. In the navigation panel, click Applications.
  2. Select an application and click Entitlements.
  3. Select an entitlement. On the Details tab, in the Access Requests area of the page, click Edit.
  4. Enable Limit Grant Time.
  5. Set the maximum duration limit of the entitlement grant. Options range from one hour to one month.
  6. Click Save.
  7. Repeat this process on each applicable entitlement.