User accounts are attested using the User account attestation attestation procedure.
For this attestation procedure you can use the following attestation conditions:|
Condition |
Description |
|---|---|
|
All user accounts |
Attests all user accounts. |
|
All privileged user accounts |
Attests all privileged user accounts. |
|
User accounts in the target system |
Select the target systems. Attests user accounts assigned to these target systems. |
|
User accounts of specific employees |
Select the identities. Attests user accounts assigned to these identities. |
|
Specific user accounts |
Select the user accounts to attest. Use |
|
User accounts with defined risk index |
|
|
User accounts with matching name |
Enter part of a name of user accounts with access to attest. All user accounts that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on. |
|
User accounts with employees in departments |
Select the departments. Attests user accounts with identities assigned to these departments. Use |
|
User accounts of employees in child departments |
Select the departments. Attests user accounts with identities assigned to these or their child departments. Use |
|
User accounts of employees with matching names |
Enter part of a name of the identities with user accounts to attest. All identities that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on. |
|
New or not attested for x days |
Specify a number of days. Attests user accounts that have not been attested for the defined number of days. |
|
All user accounts not assigned to an identity |
Only attests user accounts not assigned to an identity (so-called orphaned user accounts). |
|
Linked user accounts |
Attests only user accounts that are assigned these identities. |
|
Target system type |
Select the target systems types. Attests user accounts in target system of this target system type. |
and 
to switch between hierarchical and list view. Multi-select is possible.|
Approval policies |
Description |
|---|---|
| Attestation by selected approvers | Click Assign/Change in the Attestors field and then select the identities that can make approval decisions about attestation cases. |
|
Attestation by target system manager |
Target system managers can be approved through attestation cases. |