Resources
Resources are found in in IT resources and non-IT resources. Non-IT resources help an employee's work efficiency, for example, mobile phones, desks, company cars, or keys. You can assign resources directly to an employee or through classification into hierarchical roles. Similarly, you can resources request for an employee through the IT Shop. Resources are divided up from a functional point of view.
- Resources
- Multi-request resources
- Multi-requestable/unsubscribable resources
An employee can own resources (workstation, device) just once. They can be requested exactly once in the IT Shop. The resources are assigned to the employees after approval has been granted. They remain assigned until the request is canceled. You can request them again a later point. Examples are telephones or company cars.
All resources are displayed in a list in Auditing that you select through Resources in the Auditing menu. You can select an employee from here to view more details about their resources.
After you have selected a resource, you can gather more information through various views. You will know many of the views already from My Responsibilities.
Table 85: Overview of resource views
|
Overview |
Shows more details about the resource in a Hyper View. This information might be assigned service items or employees, for example. |
To view all the information at one glance and navigate quickly to points of interest, click the linked content in the shapes.
For creating reports. |
|
Memberships |
Shows all employees that have access to the selected resource. |
You can view the origin of an assignment for a selected employee. An analysis of the assignment is shown in the detailed content view. |
|
Master data |
Shows the properties entered in the master data for the department. |
View of properties entered.
You can edit the service item, for example. |
|
Usage |
Shows various role classes for viewing employees who are members of the selected service. |
Select a role class to view employee assignments. |
|
Compliance |
Lists all compliance rules for the selected resource and their analysis. |
For viewing compliance rule analyzes. |
|
Attestations |
Lists all attestation cases for the selected resources. |
You can selectively search for an attestation case and display attestors for pending attestation cases or send reminders. |
System entitlements
In Auditing, you can view the entitlements assigned to an employee for the particular target system type that they manage. Each target system type has its own tile in the Auditing view.
Auditing of system entitlements is the same for all target system types and is therefore described here for all of them together.
System entitlements map the objects that control access to target system resources in the target systems. A user account obtains the required permissions for accessing target system resources through its memberships in system entitlements. The following system entitlements are displayed in the Auditing menu, for example.
- Active Directory groups
- SAP groups
- SharePoint groups
After you have selected the system entitlement, you can gather more information through various views. You will know many of the views already from My Responsibilities.
Table 86: Overview of system entitlement views
|
Overview |
Shows more details about the system entitlement in a Hyper View. This might be the target system that is assigned, user accounts and service item, for example. |
To view all the information at one glance and navigate quickly to points of interest, click the linked content in the shapes.
For creating reports. |
|
Memberships |
Shows all employees that have access to the selected system entitlement. |
You can view the origin of an assignment for a selected employee. An analysis of the assignment is shown in the detailed content view. |
|
Master data |
Shows the properties entered in the master data for the system entitlement. |
View of properties entered.
You can, for example, edit service items or set the risk index. |
|
Child groups |
Shows assigned sub groups. |
Here you can see which groups are members in the selected system entitlement. |
|
Usage |
Show various role classes for viewing employee assignments for the selected system entitlement. |
Select a role class to view employee assignments. |
|
Compliance |
Lists all compliance rules for the selected system entitlement and their analysis. |
For viewing compliance rule analyzes. |
|
History |
Displays the history of states and comparisons of the selected system entitlement. |
You can swap from timeline to table view. Navigate by clicking the mouse within the timeline. |
|
Attestations |
Lists all attestation cases for the selected system entitlement. |
You can selectively search for an attestation case and display attestors for pending attestation cases or send reminders. |
Viewing an employee's system entitlements
The view for an employee's system entitlements are explained on the basis of an Active Directory group example.
To view an Active Directory group's system entitlements
- Select the target system in the Auditing Active Directory menu.
- Select an employee in Auditing - Active Directory using Change.
This displays the system entitlements assigned to the employee.
- Click Show details.
This displays other view for the selected system entitlement.
System roles
All system roles are displayed in a list Auditing view that you select through System Roles in Auditing. You can select an employee from here to view more details about their roles and entitlements.
After you have selected a system role, you can use various views to obtain more information. You will know many of the views already from My Responsibilities.
Table 87: Overview of system role views
|
Overview |
Shows more details about the system role in a Hyper View. This information might be the groups that are assigned, service item or employees, for example. |
To view all the information at one glance and navigate quickly to points of interest, click the linked content in the shapes.
For creating reports. |
|
Memberships |
Shows all employees that have access to the selected system role. |
You can view the origin of an assignment for a selected employee. An analysis of the assignment is shown in the detailed content view. |
|
Master data |
Shows the properties entered in the master data for the system role. |
View of properties entered.
You can, for example, edit service items or system role's supervisor. |
|
Permissions |
Shows all the assigned entitlements of the selected system role. |
To can view the analysis of the assignment in the detailed content view for the selected entitlement. |
|
Risk |
List properties and assignments that contribute to the calculated risk index. |
For viewing risk index functions. |
|
Usage |
Shows various role classes for viewing employee assignments for the selected system role. |
Select a role class to view employee assignments. |
|
Compliance |
Lists all compliance rules for the selected system role and their analysis. |
For viewing compliance rule analyzes. |
|
History |
Displays the history of states and comparisons of the selected system role. |
You can swap from timeline to table view. Navigate by clicking the mouse within the timeline. |
|
Attestations |
Lists all attestation cases of the selected system role. |
You can selectively search for an attestation case and display attestors for pending attestation cases or send reminders. |
