After you have entered the main data, you can run the following tasks.
Attestation and recertification
One Identity Manager users for attestation
Attestation base data
Approval processes for attestation cases
Attestation types
Attestation procedure
Attestation policies
General main data of an attestation procedure
Defining reports for attestation
Default attestation procedures
Additional tasks for attestation procedures
Attestation schedules
Compliance frameworks
Chief approval team
Attestation policy owners
Standard reasons for attestation
General main data of attestation policies
Specifying risk indexes for attestation guidelines
Default attestation policies
Additional tasks for attestation policies
Sample attestation
The attestation policy overview
Assigning approvers to attestation policies
Assigning compliance frameworks to attestation policies
Mitigating controls
Running attestation for single objects
Showing or hiding conditions
Copy attestation policies
Showing selected objects
Deleting attestation policies
Disabling attestation policies
Reports about attestations
Creating, editing, deleting samples
General main data of samples
Managing sample data
Generating sample data automatically
Using samples with attestation policies
Displaying the sample overview
Default sample for attesting memberships in system entitlements
Custom mail templates for notifications
Creating and editing attestation mail templates
General properties of a mail template
Creating and editing a mail definition
Copying mail templates for attestation
Displaying attestation mail templates previews
Deleting mail templates for attestation
Custom notification processes
Suspending attestation
Approval policies for attestations
Attestation sequence
General main data of approval policies
Default approval policies
Additional tasks for approval policies
Approval workflow for attestations
Working with the workflow editor
Setting up approval workflows
Selecting attestors
Editing approval levels
Editing approval steps
Properties of an approval step
Connecting approval levels
Additional tasks for approval workflows
Deleting approval workflows
Default approval workflows
Default approval procedures
Setting up multi-factor authentication for attestation
Prevent attestation by employee awaiting attestation
Attestation by peer group analysis
Managing attestation cases
Using attestation policies to find attestors
Using roles of employees to be attested to find attestors
Using attestation objects to find attestors
Determining attestors using the attestation objects' service item
Using attestation object managers to find attestors
Using persons responsible for attestation objects to find attestors
Using a specified role to find attestors
Using product owners to find attestors
Using owners of a privileged object to find attestors
Using additional Active Directory group owners to find attestors
Using owners of the attestation objects to find attestors
Using employees assigned to user accounts to find attestors
Determining attested employee as attestor
Calculated approval
Approvals to be made externally
Waiting for further approval
Setting up approval procedures
Additional tasks for approval procedures
Overview of the approval procedure
Specifying permitted approval procedures for tables
Copying an approval procedure
Deleting approval procedures
Determining the responsible attestors
Starting attestation
Additional tasks for attestation cases
Modifying approval workflows for pending attestation cases
Closing attestation cases for deactivated employees
Deleting attestation cases
Notifications in the attestation process
Default attestation and withdrawal of entitlements
Demanding attestation
Reminding attestors
Scheduling attestation demands
Reminding attestors about attestation objects
Granting or denying attestation cases
Notifying delegates
Canceling attestation cases
Escalation of attestation cases
Delegating attestations
Rejecting approvals
Notifications with questions
Notifications from additional attestors
Link for verifying new external users
Default mail templates
Attestation by mail
Attesting system entitlements
System role attestation
Application role attestation
Business role attestation
User attestation and recertification
One Identity Manager users for attesting and recertifying users
Configuring user attestation and recertification
Attesting new users
Mitigating controls
Self-registration of new users in the Web Portal
Adding new employees using a manager or employee administrator
Importing new employee main data
Scheduled attestation
Limiting attestation objects for certification
Recertifying existing users
General main data of mitigating controls
Additional tasks for mitigating controls
Calculating mitigation
Setting up attestation in a separate database
Requirements for the central database
Setting up work databases
Setting up synchronization between central and work databases
Setting up and running attestations in the work database
Configuration parameters for attestation
Additional tasks for attestation procedures
Overview of the attestation procedure
You can see the most important information about an attestation procedure on the overview form.
To obtain an overview of an attestation procedure
-
In the Manager, select the Attestation > Basic configuration data > Attestation procedures category.
-
Select the attestation procedure in the result list.
-
Select the Attestation procedure overview task.
Assigning approval policies
Use this task to assign the selected attestation procedure to the approval policies that should be used in this attestation procedure. All approval policies permitted for the attestation base object are listed.
To assign approval policies to attestation procedures
-
In the Manager, select the Attestation > Basic configuration data > Attestation procedures category.
-
Select the attestation procedure in the result list.
-
Select Assign approval policies task.
In the Add assignments pane, assign the approval policies.
TIP: In the Remove assignments pane, you can remove approval policy assignments.
To remove an assignment
-
Select the approval policy and double-click
.
-
- Save the changes.
Which approval policies are permitted depends on the approval procedures in use. Approval procedures dictate to which tables an approval procedure can be assigned.
Related topics
Creating a copy
You can make copies of attestation procedures and those copies allow you to modify default attestation procedures.
To copy an attestation procedure
-
In the Manager, select the Attestation > Basic configuration data > Attestation procedures category.
-
Select the attestation procedure in the result list.
-
Select Create copy task.
-
Confirm the security prompt with Yes.
-
Decide whether the condition types should be copied for the attestation wizard in the Web Portal as well.
Condition types are required if attestation policies are created and edited with the attestation wizard in the Web Portal. For detailed information, see One Identity Manager Web Designer Web Portal User Guide.
-
Edit the attestation procedure copy and save the changes.
The attestation procedure copy is displayed on the main data form with the name <Name of original attestation procedure>(copy). You can rename and edit this attestation policy.