ForgeRock AIC Practice Exam

Which configuration option dynamically adds identities to a role?

1. Set a conditional filter

2. Define a manual role assignment

3. Use a default role for all new users

4. Enable LDAP sync for the role

The correct answer is: Set a conditional filter

The most effective method to dynamically add identities to a role is to set a conditional filter. This approach allows for the establishment of specific criteria that, when met, automatically assign users to a role based on their attributes or other relevant factors. This flexibility helps organizations manage user roles dynamically, adapting to changes in user status or attributes without manual intervention. In contrast, defining a manual role assignment requires an administrator to explicitly assign users to the role, which does not support dynamic adjustments based on conditions. Using a default role for all new users is a static assignment and does not cater to ongoing changes in user properties after their initial setup. Enabling LDAP sync for the role primarily facilitates synchronization of user data between the LDAP directory and the identity management system but does not provide a mechanism for dynamic role assignment based on conditions. Thus, the conditional filter stands out as the most suitable choice for achieving dynamic role membership based on predefined criteria.