立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation types Attestation procedure Attestation schedules Compliance frameworks Chief approval team Attestation policy owners Standard reasons for attestation Attestation policies Sample attestation Grouping attestation policies Custom mail templates for notifications Suspending attestation Automatic attestation of policy violations
Approval processes for attestation cases
Approval policies for attestations Approval workflow for attestations Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by identity awaiting attestation Automatic acceptance of attestation approvals Phases of attestation Attestation by peer group analysis Approval recommendations for attestations Managing attestation cases
Attestation sequence Default attestations Mitigating controls Setting up attestation in a separate database Configuration parameters for attestation

Deleting attestation policies

IMPORTANT: Do not delete attestation policies, for audit reasons.

Attestation policies may still be removed from the One Identity Manager database under specific conditions. Ensure that the attestation policy is archived when deleted.

For more information about data archiving, see the One Identity Manager Configuration Guide.

Prerequisite

  • The attestation policy is disabled.

To delete an attestation policy

  1. In the Manager, select the Attestation > Attestation policies > Disabled policies category.

  2. Select the attestation policy in the result list and run the Change main data task.

  3. Select Delete attestation policy task.

  4. Confirm the security prompt with Yes.

    The attestation policy is deleted. All associated attestation cases, approval workflows and the attestation history are deleted.

Related topics

Disabling attestation policies

Attestations are run when the schedule assigned to an attestation policy is enabled. You can disabled attestation policies to prevent attestation cases being created for individual attestation policies.

IMPORTANT: All associated attestation cases are deleted. To be able to trace the changes later, configure how the data is logged. For more information, see Deleting attestation cases and the One Identity Manager Configuration Guide.

TIP: Numerous default attestation policies are supplied with One Identity Manager. Check which of the default attestation policies are relevant for your data situation when you set up your database. Disable all unnecessary attestation policies.

To disable an attestation policy

  1. In the Manager, select the Attestation > Attestation policies category.

  2. Select the attestation policy in the result list and run the Change main data task.

  3. Set Disabled.

  4. Save the changes.
Related topics

Sample attestation

Sample attestation provides a way to limit the set of attestation objects for an attestation. For example, this can be useful if attesting everyone in an audit would take too long. The sample data can either be generated automatically or compiled manually.

The One Identity Manager provides a standard sample that is used to attest memberships in system entitlements after organizational changes.

Detailed information about this topic

Creating, editing, deleting samples

To be prepare sample attestations:

  • Create samples.

  • Define the sample data.

  • Assign the samples to the attestation policies that will use them.

To create a sample

  1. In the Manager, select the Attestation > Samples category.

  2. Click in the result list.

  3. Edit the sample's main data.

  4. Save the changes.

To edit a sample

  1. In the Manager, select the Attestation > Samples category.

  2. In the result list, select the sample and run the Change main data task.

  3. Edit the sample's main data.

  4. Save the changes.

To delete a sample

  1. In the Manager, select the Attestation > Samples category.

  2. In the result list, select the sample and click .

  3. Confirm the security prompt with Yes.
Detailed information about this topic
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级