Exam SAVIGA-C01 Topic 3 Question 58 Discussion

In this scenario, where John is a new full-time employee required to work from the Sydney office, the most specific and appropriate Enterprise Role assigned from the Birthright Rule would likely be A. Birthright - Sydney. Here's the reasoning:
* Saviynt's Birthright Roles and Rules: Birthright roles are designed to automatically provision access based on specific criteria like location, job role, or employment type. Birthright rules define the conditions for assigning these roles.
* Specificity of Role Assignment: The goal is to assign the most relevant and granular role based on the available information. In this case, John's location (Sydney) is the most specific criterion mentioned.
* Why Other Options Are Less Likely:
* B. Birthright - Permanent - Full-time: While John is a full-time employee, this role might be too broad if there are other location-specific roles.
* C. Birthright - All: This role is likely too generic and would grant excessive access. It's generally not good practice to have an "all-encompassing" birthright role.
* D. Birthright - Employee: Similar to the "Full-time" role, this might be too broad if location- specific roles are available.
* Best Practices: It's a best practice in identity governance to use the most specific criteria possible when assigning birthright access. This helps enforce the principle of least privilege.
In summary: The "Birthright - Sydney" role is the most appropriate choice because it aligns with John's specific work location, ensuring he receives the necessary access for his role while adhering to the principle of least privilege.