Which of the following statements about role assignments is incorrect?

Role assignment within SailPoint Identity Now is a process that can indeed occur automatically based on specific criteria, contrary to the statement that it is always manual. The system allows for dynamic role assignment through policies and defined business rules, enabling roles to be assigned to identities based on various attributes without requiring manual intervention.

For instance, if an organization's roles are structured around specific attributes, such as department or job function, the identity management system can automatically assign roles to users whose attributes match the defined criteria in the role definition. This automation significantly enhances efficiency and helps maintain compliance by ensuring that access is appropriately managed according to the established governance framework.

The other statements correctly reflect aspects of role assignments. Roles can indeed include access profiles, which define the exact entitlements granted to users assigned to those roles. Furthermore, entitlements can be provisioned under a role, making it easier to manage access at a higher level rather than handling individual permissions. These elements collectively support a robust identity governance process.