Memberships in business roles are attested using the Business role membership attestation attestation procedure.
| Condition | Description | 
|---|---|
| All roles | Attests memberships in all business roles. | 
| Business roles with matching name | Enter part of a name of business roles with memberships to attest. All business roles that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on. | 
| Attesting by attestation status | Select an attestation status  You can select the follow status: 
 | 
| Specific identities | Select the identities.  | 
| Specific identities with subidentities. | Select the identities.  | 
| Specific roles | Select the business roles. Attests memberships in these business roles. Use  | 
| New or not attested for x days | Specify a number of days.  | 
| Roles with specific owners | Select the identities.  | 
| Roles with specific role classes | Select the role classes.  | 
| Roles with defined risk index |  | 
| Roles with any owner | Attests all memberships in business roles that have an owner. | 
| Roles with owners in departments | Select the departments.  | 
| Roles by assignment type | Select how memberships in business roles must be assigned to enable attestation: 
 | 
| Approval policies | Description | 
|---|---|
| Attestation by selected approvers with automatic removal of assignments | In the Attestors field, click Select/Change and select the identities that can make approval decisions about attestation cases. Memberships are deleted if attestation is denied and the configuration fits. | 
