You can see entitlements that are assigned locations for which you are responsible. You can also display the reason why locations have certain entitlements (entitlement origin).
To display a location's entitlements
-
In the menu bar, click Responsibilities > My Responsibilities.
-
On the My Responsibilities page, click Locations.
-
On the Locations page, click the location whose entitlements you want to display.
-
On the overview page, click Entitlements.
This opens the Entitlements - <location name> page (see Entitlements – Location (page description)).
-
(Optional) To display more information about the origin of an entitlement, perform the following actions:
-
In the list, click the entitlement that you want to know more about.
-
In the details pane, on the Detective tab, click 
(Expand) next to Analysis for.
This displays more information about the entitlement's assignment.
Related topics
You can add entitlements to locations for which you are responsible. You do this through requests.
To assign an entitlement to a location
-
In the menu bar, click Responsibilities > My Responsibilities.
-
On the My Responsibilities page, click Locations.
-
On the Locations page, click the location to which you want to add an entitlement.
-
On the overview page, click Entitlements.
-
On the Entitlements - <location name> page, click Add new.
-
In the Add a new entitlement dialog, in the Entitlement type menu, select which type of entitlement you want to add.
-
Click Assign.
-
In the Entitlement dialog, in the list, click the entitlement that you want to add to the business role.
-
In the Add a new entitlement dialog, click Request.
-
On the My Shopping Cart page, click Submit.
After the request has been granted approval, the entitlement is added to the location.
Related topics
You can delete entitlements that are assigned locations for which you are responsible.
To delete an entitlement of a location
-
In the menu bar, click Responsibilities > My Responsibilities.
-
On the My Responsibilities page, click Locations.
-
On the Locations page, click the location whose entitlements you want to delete.
-
On the overview page, click Entitlements.
-
On the Entitlements - <location name> page, in the list, select the check box in the row of the entitlement you want to delete.
-
Click Delete.
Related topics
You can use attestation to test the balance between security and compliance within your company. Managers or others responsible for compliance can use One Identity Manager attestation functionality to certify correctness of permissions, requests, or exception approvals either scheduled or on demand. Recertification is the term generally used to describe regular certification of permissions. One Identity Manager uses the same workflows for recertification and attestation.
There are attestation policies defined in One Identity Manager for carrying out attestations. Attestation policies specify which objects are attested when, how often, and by whom.Once an attestation is performed, One Identity Manager creates attestation cases that contain all the necessary information about the attestation objects and the attestor responsible. The attestor checks the attestation objects. They verify the correctness of the data and initiate any changes that need to be made if the data conflicts with internal rules.
Attestation cases record the entire attestation sequence. Each attestation step in an attestation case can be audit-proof reconstructed. Attestations are run regularly using scheduled tasks. You can also trigger single attestations manually.
Attestation is complete when the attestation case has been granted or denied approval. You specify how to deal with granted or denied attestations on a company basis.
Detailed information about this topic
