After you have entered the main data, you can run the following tasks.
Attestation and recertification
One Identity Manager users for attestation
Attestation base data
Approval processes for attestation cases
Attestation types
Attestation procedure
Attestation policies
General main data of an attestation procedure
Defining reports for attestation
Default attestation procedures
Additional tasks for attestation procedures
Schedules
Compliance frameworks
Chief approval team
Attestation policy owners
Standard reasons for attestation
General main data of attestation policies
Risk assessment
Default attestation policies
Additional tasks for attestation policies
Custom mail templates for notifications
The attestation policy overview
Assigning approvers
Assigning compliance frameworks
Mitigating controls
Running attestation for single objects
Showing or hiding conditions
Creating a copy
Showing selected objects
Deleting attestation policies
Disabling attestation policies
Reports about attestations
Creating and editing attestation mail templates
General properties of a mail template
Creating and editing a mail definition
Copying mail templates for attestation
Displaying attestation mail templates previews
Deleting mail templates for attestation
Custom notification processes
Approval policies for attestations
Attestation sequence
General main data of approval policies
Default approval policies
Additional tasks for approval policies
Approval workflow for attestations
Working with the workflow editor
Setting up approval workflows
Selecting attestors
Editing approval levels
Editing approval steps
Properties of an approval step
Connecting approval levels
Additional tasks for approval workflows
Deleting approval workflows
Default approval workflows
Default approval procedures
Setting up multi-factor authentication for attestation
Prevent attestation by employee awaiting attestation
Attestation by peer group analysis
Managing attestation cases
Using attestation policies to find attestors
Using roles of employees to be attested to find attestors
Using attestation objects to find attestors
Determining attestors using the attestation objects' service item
Using attestation object managers to find attestors
Using persons responsible for attestation objects to find attestors
Using a specified role to find attestors
Using product owners to find attestors
Using owners of a privileged object to find attestors
Using additional Active Directory group owners to find attestors
Using owners of the attestation objects to find attestors
Using employees assigned to user accounts to find attestors
Determining attested employee as attestor
Calculated approval
Approvals to be made externally
Waiting for further approval
Setting up approval procedures
Additional tasks for approval procedures
Overview of the approval procedure
Specifying permitted approval procedures for tables
Copying an approval procedure
Deleting approval procedures
Determining the responsible attestors
Starting attestation
Additional tasks for attestation cases
Modifying approval workflows for pending attestation cases
Closing attestation cases for deactivated employees
Deleting attestation cases
Notifications in the attestation process
Default attestation and withdrawal of entitlements
Demanding attestation
Reminding attestors
Scheduling attestation demands
Reminding attestors about attestation objects
Granting or denying attestation cases
Notifying delegates
Canceling attestation cases
Escalation of attestation cases
Delegating attestations
Rejecting approvals
Notifications with questions
Notifications from additional attestors
Link for verifying new external users
Default mail templates
Attestation by mail
Attesting system entitlements
System role attestation
Application role attestation
Business role attestation
User attestation and recertification
One Identity Manager users for attesting and recertifying users
Configuring user attestation and recertification
Attesting new users
Mitigating controls
Self-registration of new users in the Web Portal
Adding new employees using a manager or employee administrator
Importing new employee main data
Scheduled attestation
Limiting attestation objects for certification
Recertifying existing users
General main data of mitigating controls
Additional tasks for mitigating controls
Calculating mitigation
Configuration parameters for attestation
Additional tasks for approval policies
Editing approval workflows
Here, you can edit the approval workflow assigned to the approval policy.
To edit the assigned approval workflow
-
Select Attestation > Basic configuration data > Approval policies.
-
Select the approval policy in the result list.
-
Select 1. Editing approval workflows.
This opens the Workflow Editor.
Detailed information about this topic
Validity checking
Once you have edited an approval policy, you need to test it. This checks whether the approval steps can be used in the approval workflows in this combination. Non-valid approval steps are displayed in the error window.
To test an approval policy
-
In the Manager, select the Attestation > Basic configuration data > Approval policies category.
-
Select the approval policy in the result list.
-
Select the Validity check task.
Approval workflow for attestations
You need to allocate an approval workflow to the approval policies in order to find the attestors. In an approval workflow, you specify the approval procedures, the number of attestors and a condition for selecting the attestors.
Use the workflow editor to create and edit approval workflows.
To edit an approval workflow
-
In the Manager, select the Attestation > Basic configuration data > Approval workflows category.
-
Select the approval workflow in the result list and run the Change main data task.
- OR -
Click
in the result list.
This opens the Workflow Editor.
-
Edit the approval workflow main data.
- Save the changes.