Recommendations

Recommendations are suggestions from Oblique to simplify entitlements without changing access.

How recommendations work

Recommendations run automatically and regularly in your environment. When access changes are made that would affect a recommendation, it gets automatically updated.

Only admins can see recommendations. You can find recommendations for your tenant in the Recommendations tab under Manage. For listings with recommended changes, recommendations also appear above the access table for that listing.

Create a request to apply the recommendation, or ignore a recommendation to dismiss it.

Recommendations are deterministic. They currently only suggest exact changes — that is, they don’t suggest changes that would alter the resulting access in any way.

Recommendations only apply to role assignments from listings, not to resource-based access.

Recommendations cannot be disabled.

Types of recommendations

Oblique supports the following types of recommendations:

• Redundant access, to deduplicate direct access where indirect access already exists. For example, if a user has access to a listing role both directly and through a group or team they’re part of, the recommendation will suggest removing the direct access.
• Consolidate access, to migrate direct access for several users to group-based access, where a suitable group exists. For example, if three users who are all in Engineering have direct access to a listing role, the recommendation will suggest adding a role assignment for Engineering and removing their direct assignments, as long as no additional users would gain access.

Note

Multiple groups may be suggested for the same set of users when consolidating access — that is, recommendations can overlap. Choose the group that has a clear reason to be granted access.

Apply a recommendation

You must be an admin to apply a recommendation.

From a selected recommendation in the Recommendations inbox:

1. In the upper right of the recommendation, select Create request. This will create a request. Opening a request from a recommendation implicitly approves it, since an admin is the one opening it. However, the request won’t be auto-applied, even if it normally would be.
2. View the open request linked to the recommendation by selecting View request or clicking on the request name. The request will show that it was created from a recommendation underneath Requester on the request.
3. Select Apply change to apply the request.

Ignore a recommendation

You must be an admin to ignore a recommendation.

From a selected recommendation in the Recommendations inbox:

1. In the upper right of the recommendation, select Ignore.

The recommendation will be dismissed and will not be shown again.

Caution

You cannot currently view ignored recommendations or restore them. Ignoring a recommendation is not an event recorded in audit logs.