All employees saved in the database are recertified using the User recertification attestation policy supplied in One Identity Manager. It may be necessary to limit recertification of new users to a certain group of employees, for example, if only employees in a specific departments should be attested. To do this, you can extend the condition attached to the attestation policy. Create a custom attestation policy for this.
The following objects must be changed so that recertification of users can be carried out with this attestation policy. Always create a copy of the respective object to do this.
-
User recertification attestation policy
-
VI_Attestation_AttestationCase_Person_Approval_Granted process
-
VI_Attestation_AttestationCase_Person_Approval_Dismissed process
IMPORTANT: In order for recertification to run correctly in the Web Portal, the default Certification of users attestation procedure and the default Certification of users approval policy must be assigned to the attestation policy.
The default attestation procedure, the default approval policy, and the default Certification of users approval workflow must not be changed.
To customize default recertification of users
-
Copy the User recertification attestation policy and customize it.
Table 61: Attestation policy properties Property
Value
Attestation procedure
Certification of users.
Approval policies
Certification of users.
Editing conditions
Copy the default condition without modification so that the correct attestation object is selected.
To limit the number of attestation objects, you can add additional partial conditions to the database query.
-
In the Designer, copy the VI_Attestation_AttestationCase_Person_Approval_Granted process of the AttestationCase base object and customize the copy.
Table 62: Process properties with changes Process property
Change
Pre-script for generating
Replace the UID of the User recertification attestation policy with the UID of the new attestation policy.
Generating condition
-
In the Designer, copy the VI_Attestation_AttestationCase_Person_Approval_Dismissed process of the AttestationCase base object and customize the copy.
Table 63: Process properties with changes Process property
Change
Pre-script for generating
Replace the UID of the User recertification attestation policy with the UID of the new attestation policy.
Generating condition
For more information about editing processes, see the One Identity Manager Configuration Guide.
in the result list.