Entitlements – System role (page description)
To open the Entitlements – System role page go to Responsibilities > My Responsibilities > System Roles > select system role > Entitlements.
On the Entitlements – System role page, you can:
TIP: Entitlements form the basis for membership in an object (for example in a department).
The following tables give you an overview of the different functions and content on the Entitlements – System role page.
Table 334: Controls
|
New |
Use this button to add a new entitlement to the system role (see Adding my system roles' entitlements). Identities that this system role is assigned to, automatically obtain membership in the object assigned here. |
|
Remove |
Use this button to delete selected entitlements . To do this, select the check box in front of the entitlement you want to delete and click the button. |
Table 335: Columns
|
Entitlement |
Shows the entitlement's name. |
|
Origin |
Shows how the entitlement was assigned. For example, the entitlement might have been assigned through a dynamic role. |
|
Entitlement type |
Shows the entitlement type (for example, report subscriptions, account definition, resources). |
TIP: You can show less data by using the column filters. For more information, see Filtering.
Memberships – System role (page description)
To open the Memberships – System role page go to Responsibilities > My Responsibilities > System Roles > select system role > Memberships.
On the Memberships - System role page, you can:
The following tables give you an overview of the different functions and content on the Memberships – System role page.
Table 336: Controls
|
Request memberships |
Use this button to request the system role for identities (see Assigning identities to my system roles). |
|
Deleting memberships |
Use this button to delete the system role's assignment for selected identities (see Removing identities from my system roles).
Select the check box in front of the identities whose membership in the system role you want to delete and click this button. |
Table 337: Columns
|
Identity |
Shows you the name of the identity to which the system role is assigned. |
|
Origin |
Shows you whether the system role was assigned to the identity directly or indirectly. |
TIP: For each identity, you can see more useful information in the details pane. To do this, click the appropriate instance in the list. If the identity did not receive the membership through a direct assignment (for example, through an assignment request or delegation), the Request tab provides more information:
-
Information: Displays general information about a request. The information displayed varies and is dependent on the service category from which the request was triggered.
-
Workflow: Displays the life cycle chronologically as from the time of request.
-
Compliance: Displays possible rule violations for this request.
-
Entitlements: Show which entitlement are assigned to the role (if a role was requested).
TIP: You can show less data by using the column filters. For more information, see Filtering.
Compliance – System role (page description)
To open the Compliance – System role page go to Responsibilities > My Responsibilities > System Roles > select system role > Compliance.
On the Compliance – System role page, you can see the rule violations caused by the system role. (see Displaying my system roles' rule violations).
The following table gives an overview of the content of the Compliance – System role page.
Table 338: Columns
|
Entitlement |
Shows the entitlement that caused the rule violation. |
|
Rule |
Shows the rule that was violated. |
|
Risk index |
Shows the severity of the rule violation (meaning the calculated risk index). The higher this value is, the higher the risk that this rule violation poses. |
|
Risk index (reduced) |
Shows the risk index taking mitigating controls into account. A rule’s risk index can be reduced by a significance amount after mitigating controls have been applied.
Mitigating controls are processes that exist outside the One Identity Manager solution and that reduce the risk of violation. For more information, see Compliance – Governance Administration. |
TIP: On the following tabs, you can show other useful information about each rule violation in the pane. To do this, click the corresponding entry in the list.
TIP: You can show less data by using the column filters. For more information, see Filtering.
Attestation – System role (page description)
To open the Attestation – System role page go to Responsibilities > My Responsibilities > System Roles > select system role > Attestation.
On the Attestation – System role page, you can:
The following tables give you an overview of the different functions and content on the Attestation – System role page.
Table 341: Columns
|
Display name |
Shows the name of the object included in the attestation case. |
|
Attestation policy |
Shows the name of the attestation policy in use. |
|
State |
Shows the current status of the attestation case.
The following status' are possible:
-
Pending: The attestation case is not closed yet and must still be approved.
-
Approved: The attestation case was approved. In the details pane, on the Workflow tab, you can see why the attestation case was granted approval.
-
Denied: The attestation case was denied. In the details pane, on the Workflow tab, you can see why the attestation case was denied approval. |
|
New |
Shows whether the attestation case is new. New cases have not been granted approval yet but might have been denied approval before. |
|
Due date |
Shows by when the attestation case must be completed. |
|
Risk index |
Show the attestation case's risk index. |
TIP: You can show less data by using the column filters. For more information, see Filtering.
