What are dynamic groups in SailPoint primarily used for?

Dynamic groups in SailPoint are primarily utilized to automatically update membership based on predefined criteria. This capability enables organizations to manage user groups flexibly and efficiently. For instance, when certain criteria are met—such as a user changing roles, departments, or other attributes—the membership in dynamic groups adjusts automatically without requiring manual intervention. This ensures that users are always part of the appropriate group based on their current status, which enhances overall governance and operational efficiency.

By utilizing dynamic groups, organizations can streamline their identity governance processes, ensuring that users only have access to the resources they need based on their role or other relevant factors, which supports compliance and security.