立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation types Attestation procedure Attestation schedules Compliance frameworks Chief approval team Attestation policy owners Standard reasons for attestation Attestation policies Sample attestation Grouping attestation policies Custom mail templates for notifications Suspending attestation Automatic attestation of policy violations
Approval processes for attestation cases
Approval policies for attestations Approval workflow for attestations Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by identity awaiting attestation Automatic acceptance of attestation approvals Phases of attestation Attestation by peer group analysis Approval recommendations for attestations Managing attestation cases
Attestation sequence Default attestations Mitigating controls Setting up attestation in a separate database Configuration parameters for attestation

Assigning extended properties to attestation cases

Extended properties are meta objects, such as operating codes, cost codes, or cost accounting areas that cannot be mapped directly in One Identity Manager.

For more information about setting up extended properties, see the One Identity Manager Identity Management Base Module Administration Guide.

To specify extended properties for an attestation case

  1. In the Manager, select the category

    • Attestation > Attestation runs > Attestation policies > <attestation policy> > Attestation runs > <year> > <month> > <day> - OR -

    • Attestation > Attestation run > Policy collections > <policy collection> > Attestation runs > <year> > <month> > <day>.

  2. Select the Pending attestations or the Closed attestations filter.

  3. Select an attestation case from the result list.

  4. Select Assign extended properties.

  5. In the Add assignments pane, assign extended properties.

    TIP: In the Remove assignments pane, you can remove assigned extended properties.

    To remove an assignment

    • Select the extended property and double-click .

  6. Save the changes.
Related topics

Displaying incomplete attestation runs

The Manager displays attestation runs where not all attestation cases have been generated yet. For example, this might happen if there is a large number of attestation objects or if the process that generates the attestation cases, is not processed.

To display an incomplete attestation run

  1. In the Manager, select the category

    • Attestation > Incomplete attestation runs > Attestation policies > <attestation policy>. - OR -

    • Attestation > Incomplete attestation runs > Policy collections > <policy collection>.

  2. Select the attestation run in the result list.

  3. Select the Attestation run overview task.

    This gives you an overview of attestation cases that already exist and are either pending attestation (pending attestation cases) or already closed (denied and approved attestation cases).

If incomplete attestation runs are shown, check in the Job Queue Info program whether the process that processes the CompleteCasesUnderConstruction customizer method is still running. Check and correct any errors. If the errors cannot be corrected, you can cancel the incomplete attestation runs.

Related topics

Canceling incomplete attestation runs

If errors that occur when attestation cases are being generated for an attestation run, cannot be corrected the incomplete attestation run can be canceled. After that, attestation can be restarted with the affected attestation policy.

As long as an incomplete attestation run still exists for an attestation policy, attestation cannot be restarted. If attestation needs to be started although a incomplete attestation run still exists, the attestation run must be canceled.

To cancel an incomplete attestation run

  1. In the Manager, select the category

    • Attestation > Incomplete attestation runs > Attestation policies > <attestation policy>. - OR -

    • Attestation > Incomplete attestation runs > Policy collections > <policy collection>.

  2. Select the attestation run in the result list.

  3. Select the Change main data task.

  4. Select the Cancel attestation run task.

  5. Confirm the security prompt with Yes.

There are no new attestation cases generated. All pending attestation cases are canceled and the attestation run is labeled as canceled.

Related topics

Displaying canceled attestation runs

All the attestation runs that are canceled manually are displayed in the Manager.

To display a canceled attestation run

  1. In the Manager, select the category

    • Attestation > Canceled attestation runs > Attestation policies > <attestation policy> - OR -

    • Attestation > Canceled attestation runs > Policy collections > <policy collection>.

  2. Select the attestation run in the result list.

  3. Select the Attestation run overview task.

    This shows you an overview of the denied and approved attestation cases in this attestation run.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级