After you have entered the master data, you can run the following tasks.
Attestation and recertification
One Identity Manager users for attestation
Attestation base data
Approval processes for attestation cases
Attestation types
Attestation procedure
Attestation policies
General master data for an attestation procedure
Defining reports for attestation
Default attestation procedures
Additional tasks for attestation procedures
Schedules
Compliance frameworks
Chief approval team
Standard reasons for attestation
General master data for attestation policies
Risk assessment
Default attestation policies
Additional tasks for attestation policies
Custom mail templates for notifications
The attestation policy overview
Assigning approvers
Assigning compliance frameworks
Mitigating controls
Running attestation for single objects
Showing or hiding conditions
Creating a copy
Showing selected objects
Deleting attestation policies
Disabling attestation policies
Creating and editing attestation mail templates
General properties of a mail template
Creating and editing a mail definition
Copying mail templates for attestation
Displaying attestation mail templates previews
Deleting mail templates for attestation
Custom notification processes
Approval policies for attestations
Attestation sequence
General master data for approval policies
Default approval policies
Additional tasks for approval policies
Approval workflow for attestations
Working with the workflow editor
Setting up approval workflows
Selecting attestors
Editing approval levels
Editing approval steps
Properties of an approval step
Connecting approval levels
Additional tasks for approval workflows
Deleting approval workflows
Default approval workflows
Default approval procedures
Setting up multi-factor authentication for attestation
Prevent attestation by employee awaiting attestation
Attestation by peer group analysis
Managing attestation cases
Using attestation policies to find attestors
Using roles of employees to be attested to find attestors
Using attestation objects to find attestors
Using attestation object managers to find attestors
Using persons responsible for attestation objects to find attestors
Using a specified role to find attestors
Using product owners to find attestors
Using owners of a privileged object to find attestors
Using additional Active Directory group owners to find attestors
Using owners of the attestation objects to find attestors
Using employees assigned to user accounts to find attestors
Calculated approval
Approvals to be made externally
Waiting for further approval
Setting up approval procedures
Additional tasks for approval procedures
Overview of the approval procedure
Specifying permitted approval procedures for tables
Copying an approval procedure
Deleting approval procedures
Determining the responsible attestors
Starting attestation
Additional tasks for attestation cases
Modifying approval workflows for pending attestation cases
Closing attestation cases for deactivated employees
Deleting attestation cases
Notifications in the attestation process
Default attestation and withdrawal of entitlements
Demanding attestation
Reminding attestors
Scheduling attestation demands
Reminding attestors about attestation objects
Granting or denying attestation cases
Notifying delegates
Aborting attestation cases
Escalation of attestation cases
Delegating attestations
Rejecting approvals
Notifications with questions
Notifications from additional attestors
Link for verifying new external users
Default mail templates
Attestation by mail
System entitlements attestation
System role attestation
Application role attestation
Business role attestation
User attestation and recertification
One Identity Manager users for attesting and recertifying users
Configuring user attestation and recertification
Attesting new users
Mitigating controls
Self-registration of new users in the Web Portal
Adding new employees using a manager or employee administrator
Importing new employee master data
Scheduled attestation
Limiting attestation objects for certification
Recertifying existing users
General master data for mitigating controls
Additional tasks for mitigating controls
Calculating mitigation
Configuration parameters for attestation
Additional tasks for approval workflows
The approval workflow overview
To obtain an overview of an approval workflow
-
In the Manager, select the Attestation | Basic configuration data | Approval workflows category.
-
Select the approval workflow in the result list.
-
Select Approval workflow overview.
Copying approval workflows
You can copy default approval workflows in order to customize them.
To copy an approval workflow
-
In the Manager, select the Attestation | Basic configuration data | Approval workflows category.
-
Select an approval workflow in the result list and run the Change master data task.
-
Select the Copy workflow task.
-
Enter a name for the copy.
-
Click OK to start copying.
- OR -
Click Cancel to cancel copying.
-
To edit the copy immediately, click Yes.
- OR -
To edit the copy later, click No.
Deleting approval workflows
The approval workflow can only be deleted if it is not assigned to an approval policy.
To delete an approval workflow
-
Remove all assignments to approval policies.
-
Check to which approval policies the approval workflow is assigned.
-
Go to the master data form for the approval policy and assign a different approval workflow.
-
-
In the Manager, select the Attestation | Basic configuration data | Approval workflows category.
-
Select an approval workflow in the result list.
-
Click
.
- Confirm the security prompt with Yes.