What is the role of cloud executed rules in SailPoint?

• A. To manage resource allocation
• B. To perform backend operations with write access
• C. To calculate attribute values with read-only access to ISC data model
• D. To provide user interface functionality

Answer: (C)

Cloud executed rules in SailPoint are designed to calculate attribute values within the Identity Security environment. This specific function operates with read-only access to the Identity Services Catalog (ISC) data model. Such a structure allows for the evaluation of attributes based on existing data without altering the data itself, ensuring that the foundational integrity of the ISC remains intact.

This capability is crucial in scenarios where dynamic attribute calculations are necessary, such as determining a user's access rights based on various attributes or deriving values that depend on other data points within the ISC. By leveraging cloud executed rules in this way, organizations can efficiently manage and streamline identity governance processes.

The focus on read-only access reinforces the system's integrity, as it prevents unintentional modifications that could arise from backend operations. Hence, the role of cloud executed rules is distinctively aligned with the need to perform calculations and evaluations while securely interacting with existing data without the risk of altering it.