Condition	Description
All PAM directory accounts	Attests all PAM directory accounts.
Specific PAM directory accounts	Select the PAM directory accounts to attest.
PAM directory accounts on specific directories	Select the directories. Attests directory accounts that are found in this directory.
PAM directory accounts with matching name	Enter part of a name of PAM directory accounts with access to attest. All PAM directory accounts that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

PAM access are attested using the PAM access attestation attestation procedure.

Condition	Description
All PAM accesses	Attests all PAM access.
Specific PAN asset accounts	Select the PAM asset accounts with access to attest.
Specific PAM assets	Select the PAM assets with access to attest.
Specific PAM user accounts	Select the PAM user accounts with access to attest.
Specific PAM directory accounts	Select the PAM directory accounts with access to attest.
Specific PAM directories	Select PAM directories. Attests access to these PAM directories.
Specific access type	Select access types. Attests access that uses one of these access types.
PAM user accounts mapped to specific employees	Select the identities. Attests access through PAM user accounts with these identities assigned to them.
PAM user accounts with defined risk index	Use the Lower limit and Upper limit fields to define a risk index range. Attests access through PAM user accounts with a risk index in the chosen range.
PAM user accounts with matching name	Enter part of a name of PAM user accounts with access to attest. All PAM user accounts that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

Department properties are attested using the Department attestation attestation procedure.

Condition	Description
All departments	Attests all departments.
Specific departments	Select the departments to attest. Use and to switch between hierarchical and list view. Multi-select is possible.
Departments with defined risk index	Use the Lower limit and Upper limit fields to define a risk index range. Attests departments with a risk index in the chosen range.
Departments with matching name	Enter part of a name of departments with access to attest. All departments that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

Approval policies	Description
Attestation by selected approvers	Click Assign/Change in the Attestors field and then select the identities that can make approval decisions about attestation cases.
Attestation of departments by manager	Department managers can make approval decisions through attestation cases.

Application role properties are attested using the Application role attestation attestation procedure.

Condition	Description
All application roles	Attests all application roles.
Specific application roles	Select the application roles to attest. Use and to switch between hierarchical and list view. Multi-select is possible.
Application roles with defined risk index	Use the Lower limit and Upper limit fields to define a risk index range. Attests application roles with a risk index in the chosen range.
Application roles with matching name	Enter part of a name of application roles with access to attest. All application roles that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

Identity Manager 9.1 - Web Portal User Guide