You can view all attestation cases created in an attestation run. In addition, you can approve or reject pending attestation cases.
To display attestation cases of an attestation run
-
In the menu bar, click Attestation > Attestation runs.
-
On the Attestation Runs page, click Details next to the attestation run with the attestation cases you want to display.
-
In the View Attestation Run Details pane, click the Attestation cases tab.
-
(Optional) To further limit the attestation cases to be displayed, click 
(Filter) on the Attestation cases tab.
-
(Optional) To approve or deny an attestation case, perform the following actions in the Attestation cases tab:
-
Select the check box in front of the attestation case that you want to approve or deny.
-
Click Approve or Deny.
-
In the Approve Attestation Case/Deny Attestation Case pane, enter a reason for your approval decision in the Reason for decision field.
-
Click Save.
-
(Optional) To view more details of an attestation process, click Details next to the attestation process and refer to the View Attestation Process Details pane for the relevant information.
Related topics
You can extend attestation runs.
To extend an attestation run
-
In the menu bar, click Attestation > Governance Administration.
-
On the Governance Administration page, click Attestation runs.
-
On the Attestation Policy Runs page, click the attestation run that you want to extend.
-
In the details pane, click Extend attestation run.
-
In dialog's New due date field, enter a new due date.
-
In the Reason field, enter a reason for extending.
-
Click OK.
Related topics
Using peer group analysis, approval for attestation cases can be granted or denied automatically. For example, a peer group might be all identities in the same department. Peer group analysis assumes that these identities require the same system entitlements. For example, if the majority of identities belonging to a department have a system entitlement, assignment to another identity in the department can be approved automatically. This helps to accelerate approval processes.
Peer group analysis can be used during attestation of the following memberships:
- Assignments of system entitlements to user accounts
- Secondary memberships in business roles
All identities that have the same manager or that belong to the same primary or secondary division as the identity linked to the attestation object (= identity to be attested) are grouped together as a peer group.
For more information about peer group analysis, see the One Identity Manager Attestation Administration Guide.
Related topics
If the are attestations pending and the approver responsible is not available for an extended period or has no access to Web Portal, the fallback approver or member of the chief approval team must make an approval decision. For more information about the chief approval team, see the One Identity Manager Attestation Administration Guide.
IMPORTANT: The two-person principle can be broken for attestations because chief approval team members can make approval decisions about attestation cases at any time.
Detailed information about this topic
