Chatee ahora con Soporte

Obtener ayuda en vivo
Completar registro

Iniciar sesión

Solicitar precios

Comuníquese con Ventas

Identity Manager 9.0 LTS - Compliance Rules Administration Guide

Navegación de contenido

Compliance rules and identity audit

One Identity Manager users for identity audit Basic data for setting up rules

Assigning compliance rules to rule groups Displaying the rule group overview

Compliance frameworks

Assigning compliance rules to compliance frameworks Displaying the compliance frameworks overview

Schedules for checking rules

Default schedules for identity audit Assigning compliance rules to schedules Starting schedules immediately Displaying the schedule overview

Extended properties and property groups

Creating property groups for extended properties Creating and editing extended properties

Main data for extended properties

Assigning extended properties to property groups Assigning additional property groups to extended properties Specifying scope limits for extended properties Overview of extended properties Assigning objects to extended properties

Functional areas Compliance rules attestors Rule supervisors Exception approvers Standard reasons for rule violations

Predefined standard reasons for rule violations

Setting up a rule base

Creating and editing compliance rules

General main data for compliance rules Risk assessment for rule violations Extended data for compliance rules Rule comparison IT Shop properties for compliance rules

Additional tasks for working copies

Displaying the working copy overview Assigning compliance frameworks Mitigating controls

Assigning mitigating controls Creating mitigating controls

Enabling working copies Recalculating Copy rule Comparing a rule working copy with the original Maintaining exception approvers Maintaining rule supervisors Enabling SQL definition

Additional tasks for compliance rules

Displaying the compliance rule overview Creating working copies for compliance rules Enabling and disabling compliance rules Recalculating Copying compliance rules Maintaining exception approvers Maintaining rule supervisors

Creating rule conditions

Basics for using the Rule Editor Specifying the affected employee group Specifying affected entitlements A simple rule example Rule conditions in advanced mode Rule condition as SQL query

Deleting compliance rules

Checking compliance rules

Scheduled rule checking Rule checking rule modifications Ad-hoc rule checking Speeding up rule checking

Rule check analysis

Which employees violate a specific rule? Which rules are violated by a specific employee?

Reports about rule violations

Overview of all assignments

Granting exception approval

Exception approval over a limited period Granting exception approvals in the Manager

Notifications about rule violations

Requesting exception approval Notifications about rule violations without exception approval

Determining potential rule violations

Mail templates for notifying about identity auditing

Creating and editing mail definitions for Identity Audit Base objects for mail templates using Identity Audit Use of hyperlinks in the Web Portal Default functions for creating hyperlinks Editing mail templates for identity auditing

Mitigating controls for compliance rules

Creating and editing mitigating controls for compliance rules Assigning compliance rules to mitigating controls Displaying the mitigation controls overview Calculating mitigating controls fro compliance rules

Configuration parameters for Identity Audit

Copy rule

Rules can be copied to reuse complex rule conditions, for example. Working copies as well as active rules can be used as copy templates.

To copy a working copy

In the Manager, select the Identity Audit > Rules > Working copies of rules category.
Select the working copy in the result list.
Select the Change main data task.
Select the Copy rule task.

Enter a name for the copy and click OK.

This creates a working copy with the given name.
Click Yes to immediately edit the copy's main data.

- OR -

Click Yes to edit the copy's main data later.

Comparing a rule working copy with the original

If you have made changes to the rule condition in a working copy, you can determine the effects of this using a comparison with the original rule. Rules can only be compared when an original of the working copy exists. The result of the rule comparison is displayed on the Rule comparison tab of main data form.

To compare a rule with the working copy.

In the Manager, select the Identity Audit > Rules > Working copies of rules category.
Select the working copy in the result list.
Select the Change main data task.
Select the Rule comparison task.

Table 20: Results of a rule comparison
Rule violations	Lists all employees who, as a result of the change, would (not) violate the rule as follows
Newly added	Violate the rule for the first time
Identical	Still violate the rule
No longer included	Do not violate the rule anymore

To display the rule comparison as report

In the Manager, select the Show rule comparison report.

Related topics

Rule comparison

Maintaining exception approvers

Use this task to maintain exception approvers for the selected rule. You can assign employees to the application role for exception approvers on the main data form and remove them from it.

NOTE: Changes apply to all the rules assigned to this application role.

To authorize employees as exception approvers

In the Manager, select the Identity Audit > Rules > Working copies of rules category.
Select the working copy in the result list.
Select the Maintain exception approvers task.
In the Add assignments pane, add employees.
TIP: In the Remove assignments pane, you can remove assigned employees.

To remove an assignment
- Select the employee and double-click .
Save the changes.

Related topics

Maintaining rule supervisors

Use this task to maintain rule supervisors for the selected rule. You can assign employees to the application role for rule supervisors on the main data form and remove them from it.

NOTE: Changes apply to all the rules assigned to this application role.

To authorize employees as rule supervisors

In the Manager, select the Identity Audit > Rules > Working copies of rules category.
Select the working copy in the result list.
Select the Maintain rule supervisors task.
In the Add assignments pane, add employees.
TIP: In the Remove assignments pane, you can remove assigned employees.

To remove an assignment
- Select the employee and double-click .
Save the changes.

Related topics

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación

© ALL RIGHTS RESERVED. Términos de uso Privacidad Cookie Preference Center