After you have entered the main data, you can run the following tasks.
Attestation and recertification
One Identity Manager users for attestation
Attestation base data
Approval processes for attestation cases
Attestation types
Attestation procedure
Attestation policies
General main data of an attestation procedure
Defining reports for attestation
Default attestation procedures
Additional tasks for attestation procedures
Schedules
Compliance frameworks
Chief approval team
Attestation policy owners
Standard reasons for attestation
General main data of attestation policies
Risk assessment
Default attestation policies
Additional tasks for attestation policies
Custom mail templates for notifications
The attestation policy overview
Assigning approvers
Assigning compliance frameworks
Mitigating controls
Running attestation for single objects
Showing or hiding conditions
Creating a copy
Showing selected objects
Deleting attestation policies
Disabling attestation policies
Reports about attestations
Creating and editing attestation mail templates
General properties of a mail template
Creating and editing a mail definition
Copying mail templates for attestation
Displaying attestation mail templates previews
Deleting mail templates for attestation
Custom notification processes
Approval policies for attestations
Attestation sequence
General main data of approval policies
Default approval policies
Additional tasks for approval policies
Approval workflow for attestations
Working with the workflow editor
Setting up approval workflows
Selecting attestors
Editing approval levels
Editing approval steps
Properties of an approval step
Connecting approval levels
Additional tasks for approval workflows
Deleting approval workflows
Default approval workflows
Default approval procedures
Setting up multi-factor authentication for attestation
Prevent attestation by employee awaiting attestation
Attestation by peer group analysis
Managing attestation cases
Using attestation policies to find attestors
Using roles of employees to be attested to find attestors
Using attestation objects to find attestors
Determining attestors using the attestation objects' service item
Using attestation object managers to find attestors
Using persons responsible for attestation objects to find attestors
Using a specified role to find attestors
Using product owners to find attestors
Using owners of a privileged object to find attestors
Using additional Active Directory group owners to find attestors
Using owners of the attestation objects to find attestors
Using employees assigned to user accounts to find attestors
Determining attested employee as attestor
Calculated approval
Approvals to be made externally
Waiting for further approval
Setting up approval procedures
Additional tasks for approval procedures
Overview of the approval procedure
Specifying permitted approval procedures for tables
Copying an approval procedure
Deleting approval procedures
Determining the responsible attestors
Starting attestation
Additional tasks for attestation cases
Modifying approval workflows for pending attestation cases
Closing attestation cases for deactivated employees
Deleting attestation cases
Notifications in the attestation process
Default attestation and withdrawal of entitlements
Demanding attestation
Reminding attestors
Scheduling attestation demands
Reminding attestors about attestation objects
Granting or denying attestation cases
Notifying delegates
Canceling attestation cases
Escalation of attestation cases
Delegating attestations
Rejecting approvals
Notifications with questions
Notifications from additional attestors
Link for verifying new external users
Default mail templates
Attestation by mail
Attesting system entitlements
System role attestation
Application role attestation
Business role attestation
User attestation and recertification
One Identity Manager users for attesting and recertifying users
Configuring user attestation and recertification
Attesting new users
Mitigating controls
Self-registration of new users in the Web Portal
Adding new employees using a manager or employee administrator
Importing new employee main data
Scheduled attestation
Limiting attestation objects for certification
Recertifying existing users
General main data of mitigating controls
Additional tasks for mitigating controls
Calculating mitigation
Configuration parameters for attestation
Additional tasks for approval procedures
Overview of the approval procedure
To obtain an overview of an approval procedure
-
In the Manager, select the Attestation > Basic configuration data > Approval procedures category.
-
Select an approval procedure from the result list.
-
Select the Approval procedure overview task.
Specifying permitted approval procedures for tables
You can only assign selected approval policies to attestation procedures. The approval policies permitted depend on the approval procedures applied in the approval policies and on the table that forms the attestation base object for an attestation procedure.
You specify which tables are permitted for use with custom approval procedures.
If you want to use custom tables with the default approval procedures AS, CD, EX, OM, OR, or WC then assign these table to the approval procedures.
To specify the tables that permit this approval procedure
-
In the Manager, select the Attestation > Basic configuration data > Approval procedures category.
-
Select an approval procedure from the result list.
-
Select the Assign tables task.
In the Add assignments pane, assign the tables to which the approval procedure can be assigned.
TIP: In the Remove assignments pane, you can remove table assignments.
To remove an assignment
-
Select the table and double-click
.
-
- Save the changes.
You can see which tables allow an approval procedure on the approval procedure overview form.
Related topics
Copying an approval procedure
You can copy default approval procedures in order to customize them.
To copy an approval procedure
-
In the Manager, select the Attestation > Basic configuration data > Approval procedures category.
-
Select an approval procedure in the result list. Select the Change main data task.
-
Select the Create copy task.
- Confirm the security prompt with Yes.
-
Enter the short name for the copy.
The short name for an approval procedure consists of a maximum of two characters.
-
Click OK to start copying.
- OR -
Click Cancel to cancel copying.