Can an access profile group entitlements from multiple sources?

• A. Yes, it can group from any number of sources
• B. No, it can only group from a single source
• C. Only if configured properly
• D. It depends on user permissions

Answer: (B)

Access profiles in SailPoint are designed to help manage entitlements or access rights to resources within an organization. The correct answer indicates that an access profile can only group entitlements from a single source. This means that when you create an access profile, it pulls entitlements from a designated source, ensuring that the access reflects a controlled and coherent grouping suitable for specific roles or applications.

This design is important for maintaining clear access governance. By limiting entitlements to a single source, organizations can more easily manage risks, track compliance, and maintain clarity around access rights. When entitlements come from multiple sources, it can introduce complexity and confusion in terms of managing who has access to what, which could lead to security vulnerabilities.

The other options suggest either more flexibility than exists in the functionality or depend on factors that don't align with the fundamental design of access profiles. Therefore, the notion that an access profile could aggregate entitlements from multiple sources is contrary to how they are structured in SailPoint's identity governance framework.