Attestation policies are run on a schedule and generate attestation cases. As attestor, you can verify attestation cases and make approval decisions. Verifying attestations requires reading reports or manually checking objects that are being attested.
General tips and getting started
Logging in and out
Navigation and use
Displaying the address book
Managing password questions
Changing passwords
Switching languages
Enabling/disabling email notifications
Report subscriptions management
Requests
Subscribing to reports
Editing report subscriptions
Sending reports from report subscriptions
Unsubscribing reports
The user interface layout
Requesting products
Attestation
Adding products to the shopping cart
Managing products in the shopping cart
Saved for Later list
Displaying the shopping cart
Removing products from the shopping cart
Setting the validity period of products in your shopping cart
Specifying the priority of products in your shopping cart
Giving reasons for requests
Checking the shopping cart
Requesting products in the shopping cart for multiple identities
Deleting shopping carts
Submitting requests
Displaying and requesting other identity’s products
Requesting for other identities or subidentities
Requests for Active Directory groups
Saving products for later
Displaying Saved for Later list
Requesting products on the Saved for Later list
Removing products from the Saved for Later list
Deleting the Saved for Later list
Pending requests
Displaying pending requests
Approving and denying requests
Appointing other approvers for pending requests
Displaying request history
Canceling requests
Renewing products with limit validity periods
Unsubscribing products
Displaying approvals
Undoing approvals
Rerouting approvals of pending requests
Appointing additional approvers to pending requests
Delegating approvals of pending requests to other identities
Rejecting request approval
Sending attestation reminders
Pending attestations
Responsibilities
Setting up and configuring request functions
Displaying pending attestation cases
Granting or denying attestation cases
Appointing other approvers for pending attestation cases
Displaying attestation history
Attestation – Administration
Rerouting approvals of pending attestation cases
Appointing additional approvers to pending attestation cases
Delegating approvals of pending attestation cases to other identities
Rejecting approval of attestation cases
Attestation policies
Displaying attestation policies
Displaying attestation policy reports
Setting up attestation policies
Editing attestation policies
Copying attestation policies
Deleting attestation policies
Starting attestation
Attestation runs
Displaying attestation policy runs
Displaying attestation cases of application runs
Displaying attestation run reports
Extending attestation runs
Attestation by peer group analysis
Managing shops
Appendix: Attestation conditions and approval policies from attestation procedures
Attesting primary departments
Attesting primary business roles
Attesting primary cost centers
Attesting primary locations
Attesting secondary departments
Attesting secondary cost centers
Attesting secondary locations
Attesting PAM asset groups
Attesting PAM asset accounts
Attesting PAM assets
Attesting PAM user groups
Attesting PAM user accounts
Attesting PAM account groups
Attesting PAM directory accounts
Attesting PAM accesses
Attesting departments
Application role attestation
Business role attestation
Attesting system roles
Attesting locations
Attesting system roles
Attesting memberships in system entitlements
Attesting memberships in application roles
Attestation of memberships in business roles
Attesting assignment of memberships in system roles
Attesting device owners
Attesting system entitlement owners
Attesting system entitlement owners (initial)
Attesting user accounts
Attesting system entitlements
Attesting assignment of system entitlement to departments
Attesting assignment of system entitlement to business roles
Attestation of system entitlement assignments to cost centers
Attestation of system entitlement assignments to locations
Attesting assignment of system role assignment to departments
Attesting assignment of system roles to business roles
Cost center system role assignment attestation
Attesting assignment of system entitlements to locations
Attesting assignments to system roles
Pending attestations
Displaying pending attestation cases
As attestor, you can see the attestation cases that still require approval. In addition, you can obtain more information about the attestation cases.
To display pending attestation cases
-
In the menu bar, click Attestation > Pending Attestations.
This opens the Pending Attestations page.
-
On the Pending Attestations page, perform one of the following actions:
-
To display attestation cases of a specific object, click
(Filter) and in the context menu, select the corresponding object under Object type.
-
To display attestation cases of a specific attestation policy, click
-
-
(Optional) To show more details of an attestation case, click Details next to the attestation case.
-
(Optional) To display objects involved in an attestation case in detail, perform the following actions:
-
In the list, click Details next to the attestation case.
-
In the View Attestation Case Details pane, click Show details or Download report.
-
-
(Optional) To display all the identities that can approve the attestation case, perform the following actions:
-
In the list, click Details next to the attestation case.
-
In the View Attestation Case Details pane, click the Workflow tab.
-
Related topics
Granting or denying attestation cases
As attestor, you can grant or deny approval for attestation cases under your supervision.
To approve an attestation case
-
In the menu bar, click Attestation > Pending Attestations.
-
On the Pending Attestations page, perform one of the following actions:
-
To display attestation cases of a specific object, click
-
To display attestation cases of a specific attestation policy, click
-
-
Perform one of the following actions:
-
To approve an attestation case, click Approve next to the attestation case.
-
To deny an attestation case, click Deny next to the attestation case.
TIP: To approve or deny multiple attestation cases, in the list, select the check boxes next to the attestation cases and click Approve or Deny below the list.
-
-
(Optional) In the Approve Attestation Case/Deny Attestation Case pane, perform the following actions:
-
In the Reason for your decision field, select a standard reason for your approval decision.
-
(Optional) In the Additional comments about your decision field, enter extra information about your approval decision.
TIP: By giving reasons, your approvals are more transparent and support the audit trail.
NOTE: For more detailed information about standard reasons, see the One Identity Manager IT Shop Administration Guide.
-
-
Click Save.
-
(Optional) If the approval requires multi-factor authentication, you are prompted to enter a security code. It may take a few minutes for the prompt to be displayed. Perform one of the following actions:
-
Click Login with the Starling 2FA app and follow the app instructions on your mobile phone.
-
Click Send SMS or Phone call, enter the security code, and click Next.
-
Related topics
Appointing other approvers for pending attestation cases
-
Reroute approval
You give the task of approving to another approval level -
Appoint additional approver
You can give an another identity the task of approving
The additional approver can reject the approval and return it to you
You can withdraw an additional approver. For example, if the other approver is not available. -
Delegate approval
You delegate the task of approving to another approval level
The new approver can reject the approval and return it to you
You can withdraw a delegation and delegate another identity. For example, if the other approver is not available.