Deleting system role entitlements
You can delete entitlements assigned to system roles.
To delete an entitlement from a system role
-
In the menu bar click Data administration > Data Explorer.
-
In the Data Explorer navigation, click System roles.
-
On the System Roles page, next to the system role whose entitlements you want to display, click Edit.
-
In the Edit System Role pane, click the Entitlements tab.
-
On the Entitlements tab, select the check box next to the entitlement you want to delete.
-
Click Remove.
-
Confirm the prompt with Yes in the dialog.
Displaying system role rule violations
You can see system role rule violations.
To display rule violations
-
In the menu bar click Data administration > Data Explorer.
-
In the Data Explorer navigation, click System roles.
-
On the System Roles page, next to the system role whose rule violations you want to display, click Edit.
-
On the Edit System Role pane, click the Rule Violations tab.
Appendix: Attestation conditions and approval policies from attestation procedures
When attestation policies are created or edited (see Setting up attestation policies or Editing attestation policies), you specify attestation conditions and approval policies:
-
Attestation procedures specify which objects to attest. They define the properties of the attestation objects to attest.
-
There are different attestation conditions for each attestation procedure that you use to specify which objects to attest.
-
Attestors for each attestation case are determined by approval policies.
In the following chapter, you will find more information about the various attestation procedures and associated approval policies and attestation conditions.
Attesting primary departments
Primary identity memberships in departments are attested using the Primary department attestation attestation procedure.
|
All departments |
Attests primary memberships in all departments. |
|
Specific departments |
Select the departments with primary memberships to attest.
Use  and  to switch between hierarchical and list view. Multi-select is possible. |
|
Specific child departments |
Select the departments with primary memberships to attest. In addition, primary memberships of all child departments under this department are attested.
Use and to switch between hierarchical and list view. Multi-select is possible. |
|
Departments with defined risk index |
Use the Lower limit and Upper limit fields to define a risk index range. Attests primary memberships in departments with a risk index in the chosen range. |
|
Departments with matching name |
Enter part of a name of departments with primary memberships to attest. All departments that have this pattern in their name are included.
Example: Per finds "Person", "Personal", "Perfection" and so on. |
