Once a campaign has begun, the process of deciding whether or not the current Safeguard for Privileged Passwords permissions are correctly configured begins. This is done by approvers that the data identifies as being best suited to answer the question due to their own relationship to the data being reviewed.
For example, say you run a campaign asking this question: Should <account> be a member of the <group name> group. Access Certification then uses the uploaded Identity data to fill in the question so that you get a list of all possible data that fits the question and therefore needs to be answered. Approvers (in this example either managers or group owners) go through their list of questions and answer each of them based on whether or not the listed account should in fact be a member of the listed group. These answers can then be used to improve Safeguard for Privileged Passwords since permissions marked as rejected mean the account should be removed as a member of that group.
The My Approvals page is located in the navigation bar for approvers. The My Approvals page is used for approving or rejecting the results of a campaign that has been run.
The following information and button appears in the Campaign table on this page:
This displays the name of the campaign for which you are an approver.
This column displays the date the campaign was run on.
Once a campaign has ended, the close date will be listed in this column and you will be unable to access the campaign. Administrators are responsible for closing campaigns (Closing a campaign).
Clicking one of the active campaigns opens that campaign's approval page. The following information and options appear on this page:
At the top of the page is the name of the campaign and the total number of items to review as a result of the campaign being run.
This shows the date that all approvals should be completed by for the campaign. After this date the campaign will close and no changes can be made.
This displays the total number of items left to be reviewed. The percentage of work completed appears below.
These links switch the view to display either the items that an approver has already reviewed (Completed Work Queue) or the items that have not yet been reviewed (Work Queue, which is displayed by default).
Each item identified during the campaign as requiring approval is displayed as a tile in the Work Queue. For each tile, click either the Reject or Approve button to indicate whether or not the permission is appropriate. Once you have made a selection, the tile will be moved to the Completed Work Queue where you can view completed items and edit them if necessary. If you need more information about the data behind the approval request, click on the tile to open an additional information pane. For information on reviewing items, see Approving campaign results.
Approvers will receive an email letting them know when they have approvals related to a campaign that was run. The following procedure explains how to approve or reject the results of a campaign.
To approve results for a campaign
On the campaign's information pages, the approvals to be completed are displayed as tiles. For each tile, click either the Reject or Approve button to indicate whether or not the permission is appropriate. If you need more information about the data behind this approval request, click on the tile to open an additional information pane.
After you have selected whether or not to approve, the item is moved to the Completed Work Queue. So long as the campaign is active, you can change your approval decision by clicking the View Completed Work link and selecting Rejected or Approved for the item. Clicking Move to Queue for an item removes any previous decision for an item and returns the item to the work queue (click View Work Queue to switch the view back to the list of remaining approvals).
© ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책 Cookie Preference Center
