IdentityIQ supports “Admin Roles.”

An Admin Role is a normal Role object that is configured to hold one or more IdentityIQ capabilities; any identity that receives the role inherits all of those capabilities. Therefore, configuring a role to include a set of IdentityIQ capabilities is a fully-supported and valid role option.

B. No – Roles can be flagged as Admin Roles and populated with capability names, so the statement is valid; selecting “No” contradicts documented product functionality.

1. SailPoint IdentityIQ 8.3 Administration Guide, “Managing Capabilities and Admin Roles,” pp. 130-134: “Admin roles bundle one or more capabilities. When the role is assigned to a user, the capabilities are automatically granted.”

2. SailPoint IdentityIQ 8.3 Concepts Guide, Section “Role Types,” p. 45: “Admin Role – a role that grants IdentityIQ capabilities to its members.”

3. SailPoint IdentityIQ 8.2 Security Model Reference, Section 2.3 “Capabilities,” para 4: “Capabilities may be assigned directly to an identity or indirectly through an Admin Role that contains a capability list.”