You can activate permanently deactivated identities if they have not been deactivated by certification.
To reactivate an identity
Open the home page.
On the home page, click Show in the My Direct Reports tile.
On the Identities page, click the identity you want to activate.
In the Edit Identity pane, expand the Organizational information section.
In the Organizational Information pane, clear the Permanently deactivated check box.
Click Save.
You can assign other managers to the identities for which you are responsible.
To assign a new manager to an identity
Open the home page.
On the home page, click Show in the My Direct Reports tile.
On the Identities page, click the identity that you want to assign to a new manager.
In the Edit Identity Data pane, click Assign to new manager.
On the Shopping Cart page, click Edit next to Assign new manager.
In the New manager assignment pane, in the New manager menu, select the manager you want to assign to the identity.
(Optional) If the identity for which you are selecting a new manager already has entitlements or products assigned, they are removed or unsubscribed by default on the effective date. If you want the identity to retain these entitlements or products when transferring to the new manager, disable the check boxes next to the respective entitlements and products.
(Optional) In the Reason field, enter why you are assigning a new manager.
(Optional) In the Priority menu, select the priority.
(Optional) To specify from when the new manager is responsible for the identity, enter the date in the Valid from field. If you leave the field blank, the change of manager will be carried out immediately after the new manager is approved.
Click Save.
On the Shopping Cart page, click Submit.
NOTE: On the Pending Requests page, your request to change managers is presented to the new manager to be granted or denied approval (see Approving new managers' pending requests). After the new manager approves this requests, the new manager is assigned.
You can create reports about identity data.
To create a report about an identity
Open the home page.
On the home page, click Show in the My Direct Reports tile.
On the Identities page, click the identity for which you want to create a report.
In the Edit Identity pane, click Download report.
You can use attestation to test the balance between security and compliance within your company. Managers or others responsible for compliance can use One Identity Manager attestation functionality to certify correctness of permissions, requests, or exception approvals either scheduled or on demand. Recertification is the term generally used to describe regular certification of permissions. One Identity Manager uses the same workflows for recertification and attestation.
There are attestation policies defined in One Identity Manager for carrying out attestations. Attestation policies specify which objects are attested when, how often, and by whom.Once an attestation is performed, One Identity Manager creates attestation cases that contain all the necessary information about the attestation objects and the attestor responsible. The attestor checks the attestation objects. They verify the correctness of the data and initiate any changes that need to be made if the data conflicts with internal rules.
Attestation cases record the entire attestation sequence. Each attestation step in an attestation case can be audit-proof reconstructed. Attestations are run regularly using scheduled tasks. You can also trigger single attestations manually.
Attestation is complete when the attestation case has been granted or denied approval. You specify how to deal with granted or denied attestations on a company basis.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center
