Release Notes May 2025

New Features

First - New Dashboard Widgets and Layout Options

Clarity has introduced many new dashboard widgets, as well as widgets to match some of the new standard reports (read more below).

It’s now possible to show and hide,  as well as reorganize all dashboard widgets.  In addition, new widgets will now also link to the associated reports, so clicking on “Orphaned Users Count” will load the orphaned users report. (See the report icon)

New Widgets:

• Apps failing authorization

• Empty Group Membership by App

• Top Nested Entitlement Graph Depths

• Orphaned Users Count

• Entitlements by identity count
  

Example New Widgets

Additional fields available in Access reviews! (Like last login date)

Clarity has been pulling in additional fields about user records, and now those fields are available within Access Reviews.  These fields will improve context around access review decisions, and potentially save costs (looking at you Last_Login_Date)

New Fields:

• Last Login Date

• User Create Date

• User Termination Date

New Standard Reports

As Clarity has continued to advance in detecting nested access, we’ve identified reports that will help organizations begin to take control of their AD sprawl (and other federation).  There are now 4 new standard reports:

Orphans - A dedicated report that shows current orphan access (previously possible though the mutually exclusive app access report, now standardized)

Entitlements with summary stats - show how many identities and roles have a given entitlement.  It also provides a view of whether the identity assignment is direct or indirect, and other metadata about the entitlement.  This will help unwind deep nesting.  

Nested Access by Depth - show how many levels of groups are above any given entitlement, to get a sense of nesting depth and complexity 

Entitlements: Empty Groups - Show any Group that has no members, and no members through any level of nesting.  It’s common to set up nesting structures where intermediate levels of the tree don’t have members, making it almost impossible to know for sure if a group has no members.  This report will be invaluable for teams looking to reduce group clutter. 

Data Table UX Improvements

Data tables now have much more consistent styling and increased density. Here’s an example from the roles exceptions view. 

Impactful Bugs and Hotfixes

Clarity has identified a series of impactful bugs that are fixed with the release on 5/7/25

1. Role Detail Tabs failed to load if too many users/entitlements exist

   Roles with a large number of identities or entitlements would time out trying to load the data.  Queries are now paginated and can handle any amount of users or entitlements. 

2. Application Users Tab failed to load if too many users exist

   Applications with a large number of users would time out trying to load the data.  Queries are now paginated and can handle any amount of users. 

3. Role Merging of Intermediate Nodes Would Fail

   With roles, it’s possible to create levels of role nesting  Division->Department->Job Title. When merging two roles at the “department” level, the role merge would fail.  This has been corrected. 

4. Terminate Identity Workflow would not be marked complete

   Despite successfully completing, the workflow run would not be marked as Complete.  This has been resolved. 

Clarity has identified a series of impactful bugs that were hotfixed on 4/9/25 outside of our regular release schedule.

1. Managers were able to create identities

   It’s been determined that managers should not be able to create identities, except through an identity creation request (roadmap item).  For now, managers will not be able to create identities.  

2. Managers could not export access review items (error)

   The error preventing export of access review items has been resolved.  The “export review” button will now correctly export. 

3. The Clarity role “Access Certification Admin” could create identities of any Clarity role.  

   Access Certification Admins can now only create identities with the same role, or with the role of a subordinate.  This prevents a potential issue of a Certification Admin escalating Clarity privileges through a new identity.  This change does not impact the Global Admin role. 

4. Inconsistent identity entitlement counts 

   There were discrepancies between the count of identities with an entitlement in the table report, versus the count of identities that actually had the entitlement in the detail list view.  This could happen when there were zero users with the entitlement (where previously there were more than zero) or for Clarity application entitlements.  The counts will now match. 

5. Linked Identity Re-assignment issues

   If there was no supervisor assigned for a linked identity, the review would revert to the default reviewer for the access review.  Now the fallback reviewer when there is no supervisor, will be the owning (parent) identity’s supervisor. 

Clarity has identified an impactful bug that was hotfixed on 4/10/2025 outside of our regular release schedule.

1. Review Items could be assigned to inactive supervisors

   It was identified that during review creation, if a review item was assigned to an inactive supervisor, the items would still be assigned and would need to be manually reassigned by a review admin to another reviewer.

   This issue has now been prevented, and access whose assigned supervisor is inactive will now default to the reviews default assignee.

Version 1.6.4.0