In an organization, both SailPoint administrators and developers have distinct roles when it
comes to Identity Governance and Administration (IGA) solutions. Here’s an overview of
their respective roles and responsibilities:
SailPoint Administrator:
The SailPoint Admin is responsible for maintaining and configuring the SailPoint Identity
Governance platform. Their tasks focus on the operational aspects of the system and
ensuring that it functions smoothly.
Roles and Responsibilities:
1. System Configuration and Management:
o Install, configure, and maintain the SailPoint platform.
o Monitor system health and performance.
o Apply patches, updates, and upgrades to the platform.
o Ensure integration with other IT systems (e.g., Active Directory, HR systems).
2. Identity Lifecycle Management:
o Administer user accounts and identity data across systems.
o Configure and manage identity governance policies, including roles,
entitlements, and permissions.
o Set up provisioning workflows for onboarding, offboarding, and other user
lifecycle events.
3. Access Request Management:
o Implement and manage access request workflows for users to request
specific access.
o Monitor and audit access requests and approvals to ensure compliance.
4. Security and Compliance:
o Maintain system security by ensuring proper access controls and identity
governance policies are in place.
o Enforce compliance with regulations such as GDPR, SOX, and others by
configuring and ensuring reports on user access, permissions, and
certifications.
5. Troubleshooting and Support:
o Troubleshoot issues with identity governance, access requests, and other
aspects of the SailPoint platform.
o Provide user support for SailPoint-related queries and issues.
6. Reporting and Analytics:
o Generate reports and dashboards for auditing and compliance purposes.
o Provide stakeholders with insights into user access patterns and identity
governance processes.
7. Role and Policy Management:
o Define and manage roles and role-based access controls.
o Implement role mining to identify and optimize role definitions.
o Develop and configure policy management for automated identity and access
governance.
SailPoint Developer:
The SailPoint Developer is responsible for customizing the SailPoint platform and developing
the necessary logic to support business requirements. Their tasks are more technical and
focus on the development side of the platform, often involving coding and scripting.
Roles and Responsibilities:
1. Customization and Development:
o Develop custom workflows for user provisioning, de-provisioning, and access
requests.
o Create custom connectors to integrate SailPoint with other applications (e.g.,
LDAP, SAP, ServiceNow).
o Customize and extend out-of-the-box features to meet business
requirements.
o Develop and maintain the business logic for identity governance processes.
2. Identity Data Management:
o Work on configuring and managing identity data connectors.
o Develop custom data mappings and transformations to integrate with
external systems.
o Implement and maintain identity data synchronization between SailPoint and
external systems.
3. Workflow Development:
o Create and customize workflows for identity lifecycle events, such as user
onboarding, offboarding, and role changes.
o Develop approval workflows for access requests and certifications.
o Integrate SailPoint with other systems for automated data exchange.
4. API and Integration Development:
o Develop and maintain API integrations with other systems for identity and
access management.
o Implement custom scripts and connectors to enable integration with various
applications and databases.
o Design and develop connectors using SailPoint’s API, web services, and third-
party technologies.
5. Automation and Scripting:
o Use Java, BeanShell, or other scripting languages to automate tasks in
SailPoint.
o Write and maintain scripts for specific business logic, such as custom policies,
approval workflows, and data transformations.
6. Testing and Debugging:
o Perform unit testing, integration testing, and troubleshooting of customized
code.
o Debug complex issues related to workflows, connectors, and SailPoint
configurations.
o Collaborate with administrators and other teams to resolve technical issues
and optimize system performance.
7. Documentation and Best Practices:
o Document customizations, workflows, connectors, and integrations.
o Ensure code follows best practices for maintainability and scalability.
o Work with the admin team to ensure proper version control and change
management processes.
8. Collaboration with Stakeholders:
o Collaborate with business analysts, security teams, and stakeholders to gather
requirements and ensure SailPoint meets business needs.
o Communicate with administrators and other technical teams to integrate the
solutions into the overall infrastructure.
Key Differences:
Focus Area: Admins focus on maintaining and ensuring the SailPoint platform is
operational, while developers focus on customizing and extending the platform’s
features through coding and integrations.
Technical Skills: Admins typically require expertise in system configuration and
troubleshooting, whereas developers need strong coding skills, especially in Java,
XML, and scripting languages.
Day-to-Day Tasks: Admins handle configuration, monitoring, and compliance
reporting, while developers focus on creating custom solutions and integrating
SailPoint with other systems.
Both roles work closely together to ensure that SailPoint functions effectively, with
administrators handling the ongoing operational tasks and developers creating customized
features or integrations as needed.