After you have entered the main data, you can run the following tasks.
Compliance rules and identity audit
One Identity Manager users for identity audit
Basic data for setting up rules
Mitigating controls for compliance rules
Rule groups
Compliance frameworks
Schedules for checking rules
Setting up a rule base
Default schedules for identity audit
Assigning compliance rules to schedules
Starting schedules immediately
Displaying the schedule overview
Extended properties and property groups
Creating property groups for extended properties
Creating and editing extended properties
Assigning extended properties to property groups
Assigning additional property groups to extended properties
Specifying scope limits for extended properties
Overview of extended properties
Assigning objects to extended properties
Functional areas
Compliance rules attestors
Rule supervisors
Exception approvers
Standard reasons for rule violations
Creating and editing compliance rules
rule check
General main data for compliance rules
Risk assessment for rule violations
Extended data for compliance rules
Rule comparison
IT Shop properties for compliance rules
Additional tasks for working copies
Displaying the working copy overview
Assigning compliance frameworks
Mitigating controls
Enabling working copies
Recalculating
Copy rule
Comparing a rule working copy with the original
Maintaining exception approvers
Maintaining rule supervisors
Enabling SQL definition
Additional tasks for compliance rules
Displaying the compliance rule overview
Creating working copies for compliance rules
Enabling and disabling compliance rules
Recalculating
Copying compliance rules
Maintaining exception approvers
Maintaining rule supervisors
Creating rule conditions
Basics for using the Rule Editor
Specifying the affected employee group
Specifying affected entitlements
A simple rule example
Rule conditions in advanced mode
Rule condition as SQL query
Deleting compliance rules
Checking compliance rules
Mail templates for notifying about identity auditing
Scheduled rule checking
Rule checking rule modifications
Ad-hoc rule checking
Speeding up rule checking
Rule check analysis
Reports about rule violations
Granting exception approval
Notifications about rule violations
Determining potential rule violations
Creating and editing mitigating controls for compliance rules
Assigning compliance rules to mitigating controls
Displaying the mitigation controls overview
Calculating mitigating controls fro compliance rules
Configuration parameters for Identity Audit
Additional tasks for working copies
Displaying the working copy overview
You can see the most important information about a working copy on the overview form.
To obtain an overview of a working copy
-
In the Manager, select the Identity Audit > Rules > Working copies of rules category.
-
Select the rule in the result list.
-
Select the Shelf overview task.
Assigning compliance frameworks
Use this task to specify which compliance frameworks are relevant for the selected rule. Compliance frameworks are used for classifying attestation policies, compliance rules, and company policies according to regulatory requirements.
To assign compliance frameworks to a rule
-
In the Manager, select the Identity Audit > Rules > Working copies of rules category.
-
Select the working copy in the result list.
-
Select the Assign compliance frameworks task.
-
In the Add assignments pane, assign the compliance frameworks.
TIP: In the Remove assignments pane, you can remove compliance framework assignments.
To remove an assignment
-
Select the compliance framework and double-click
.
-
- Save the changes.
Mitigating controls
Mitigating controls describe controls that are implemented if a compliance rule was violated. The next rule check should not find any rule violations once the controls have been applied.
To edit mitigating controls
-
In the Designer, enable the QER | CalculateRiskIndex configuration parameter.
NOTE: If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.