Entitlement management is currently in preview.
The Remediations tab provides information about available remediations based on the risks identified for the specified identity.
In the list of remediations each remediation has a corresponding entitlements removed number and percentage. These values represent the number and percentage of entitlements that would be removed by performing that specific remediation. For example, you have the following Remediation and Entitlements Removed values:
Detach policy AdministratorAccess 361 (64.12%)
This means that detaching the AdministratorAccess policy removes 361 entitlements, which equals 64.12% of the entitlements.
The following information is available for each remediation:
- Suggestion - What to do to accomplish remediation.
- Rationale - Why you should perform remediation.
- Risk reduction - Information about the overall change in risk severity and removed entitlements that remediation achieves. The table provides risk information before and after remediation as well as the change in risk achieved.
If you choose to remediate the issue, follow your organization's change workflow.