Memberships in business roles are attested using the Business role membership attestation attestation procedure.
| 
 Condition  | 
 Description  | 
|---|---|
| 
 All roles  | 
 Attests memberships in all business roles.  | 
| 
 Business roles with matching name  | 
 Enter part of a name of business roles with memberships to attest. All business roles that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.  | 
| 
 Attesting by attestation status  | 
 Select an attestation status  You can select the follow status: 
  | 
| 
 Specific identities  | 
 Select the identities.   | 
| 
 Specific identities with subidentities.  | 
 Select the identities.   | 
| 
 Specific roles  | 
 Select the business roles. Attests memberships in these business roles. Use   | 
| 
 New or not attested for x days  | 
 Specify a number of days.   | 
| 
 Roles with specific owners  | 
 Select the identities.   | 
| 
 Roles with specific role classes  | 
 Select the role classes.   | 
| 
 Roles with defined risk index  | 
 | 
| 
 Roles with any owner  | 
 Attests all memberships in business roles that have an owner.  | 
| 
 Roles with owners in departments  | 
 Select the departments.   | 
| 
 Roles by assignment type  | 
 Select how memberships in business roles must be assigned to enable attestation: 
  | 
| 
 Approval policies  | 
 Description  | 
|---|---|
| 
 Attestation by selected approvers with automatic removal of assignments  | 
 In the Attestors field, click Select/Change and select the identities that can make approval decisions about attestation cases. Memberships are deleted if attestation is denied and the configuration fits.  |