Owners of system entitlements are attested by using the System entitlement ownership attestation attestation procedure.
|
Condition |
Description |
|---|---|
|
All system entitlements |
Attests owners of all system entitlements. |
|
System entitlements by applications |
Select the applications. Attests system entitlements owners to which the applications are assigned. |
Initial assignments of product owners to system entitlements are attested using the System entitlement ownership attestation (initial) attestation procedure (this means that the system entitlements did not have an product owner beforehand).
|
Condition |
Description |
|---|---|
|
All system entitlements without owner |
Attests initial assignments of owners to system entitlements that do not have product owners. |
|
No dynamic groups from Active Roles |
Attests initial assignment of product owners to system entitlements. Dynamic groups are ignored in the process. |
|
Approval policies |
Description |
|---|---|
|
Attestation of ownership by proposed new owner |
The proposed new product owners can make approval decisions about attestation cases. |
User accounts are attested using the User account attestation attestation procedure.
|
Condition |
Description |
|---|---|
|
All user accounts |
Attests all user accounts. |
|
All privileged user accounts |
Attests all privileged user accounts. |
|
User accounts in the target system |
Select the target systems. Attests user accounts assigned to these target systems. |
|
User accounts of specific identities |
Select the identities. Attests user accounts assigned to these identities. |
|
Specific user accounts |
Select the user accounts to attest. Use |
|
User accounts with defined risk index |
Define a risk index range. |
|
User accounts with matching name |
Enter part of a name of user accounts with access to attest. All user accounts that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on. |
|
User accounts with identities in departments |
Select the departments. Attests user accounts with identities assigned to these departments. Use |
|
User accounts of identities in child departments |
Select the departments. Attests user accounts with identities assigned to these or their child departments. Use |
|
User accounts of identities with matching names |
Enter part of a name of the identities with user accounts to attest. All identities that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on. |
|
New or not attested for x days |
Specify a number of days. Attests user accounts that have not been attested for the defined number of days. |
|
All user accounts not assigned to an identity |
Only attests user accounts not assigned to an identity (so-called orphaned user accounts). |
|
Linked user accounts |
Attests only user accounts that are assigned identities. |
|
Target system type |
Select the target systems types. Attests user accounts in target system of this target system type. |
|
Approval policies |
Description |
|---|---|
| Attestation by selected approvers | In the Attestors field, click Select/Change and select the identities that can make approval decisions about attestation cases. |
|
Attestation by target system manager |
Target system managers can be approved through attestation cases. |
System entitlements are attested using the System entitlement attestation attestation procedure.
|
Condition |
Description |
|---|---|
|
All system entitlements |
Attests all system entitlements. |
|
Specific system entitlements |
Select the system entitlements to attest. Use |
|
No dynamic groups from Active Roles |
Attests all system entitlements. Dynamic groups are ignored in the process. |
|
System entitlements with defined risk index |
Define a risk index range. |
|
System entitlements with matching name |
Enter part of a name of system entitlements with access to attest. All system entitlements that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on. |
|
System entitlements by applications |
Select the applications. Attests system entitlements that are assigned to these applications. |
|
Approval policies |
Description |
|---|---|
|
Attestation of system entitlements by product owner (OA) |
Product owners of system entitlements can be approved through attestation cases. |
|
Attestation by target system manager |
Target system managers can be approved through attestation cases. |
© 2025 One Identity LLC. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookies Preference Center
For this attestation procedure you can use the following attestation conditions:
and 
to switch between hierarchical and list view. Multi-select is possible.