Chat now with support
Chat mit Support

Identity Manager 9.3 - Company Policies Administration Guide

Company policies in One Identity Manager Defining company policies
Creating and editing company policies Using default company policies Deleting company policies Policy groups Compliance frameworks Schedules for checking policies Company policy attestors Policy supervisors for company policies Exception approvers for policy violations Standard reasons for policy violations Mail templates for company policy notifications
Checking company policies Automatic attestation of policy violations Mitigating controls for company policies General configuration parameter for company policies

Default functions for creating hyperlinks

Several default functions are available to help you create hyperlinks. You can use the functions directly when you add a hyperlink in the mail body of a mail definition or in processes

Direct function input

You can reference a function when you add a hyperlink in the Address field of the Hyperlink context menu.

Syntax

$Script(<Function>)$

Example:

$Script(VI_BuildQERPolicyLink_Show)$

Default function for policy checking

The VI_BuildComplianceLinks script contains a collection of default functions for composing hyperlinks for exception approval of policy violations.

Table 12: Functions of the VI_BuildComplianceLinks script

Function

Usage

VI_BuildQERPolicyLink_Show

Opens the exception approval page in the Web Portal.

Checking company policies

Processing tasks are created for the DBQueue Processor to check the validity of a company policy. For every company policy, the DBQueue Processor determines which objects violate the company policy. The specified company policy approvers can check policy violations and if necessary grant exception approval.

Detailed information about this topic

Calculating policy violations

You can start policy checking in different ways to determine current policy violations in the One Identity Manager database:

  • Scheduled policy checking

  • Ad-hoc policy checking

Furthermore, company policy testing is triggered by different events:

  • A company is enabled.

  • A working copy is enabled.

  • A company policy is enabled.

During policy checking, all objects are found that fulfill the condition defined in the company policy. Only enabled company policies are taken into account.

Related topics

Scheduled policy checking

You can use the Policy check schedule from One Identity Manager's default installation to test all company policies in full. This schedule generates processing tasks at regular intervals for the DBQueue Processor.

Prerequisites

  • The company policy is enabled.

  • The schedule stored with the company policies is enabled.

Detailed information about this topic
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen