Functional areas

Functional areas

To analyze rule checks for different areas of your company in the context of identity audit, you can set up functional areas. Functional areas can be assigned to hierarchical roles and service items. You can enter criteria that provide information about risks from rule violations for functional areas and hierarchical roles. To do this, you specify how man rule violations are permitted in a functional area or a role. You can enter separate assessment criteria for each role, such as a risk index or transparency index.

Example for using Functional Areas

The risk of rule violation should be analyzed for business roles. Proceed as follows:

1. Set up functional areas.
2. Assign business roles to the functional areas.
3. Define assessment criteria for the business roles.
4. Define assessment criteria for the functional areas.
5. Assign compliance rules required for the analysis to the functional area.
6. Use the One Identity Manager report function to create a report that prepares the result of rule checking for the functional area by any criteria.

To edit functional areas

1. Select the category Business roles | Basic configuration data | Functional areas.
2. Select the functional area in the result list. Select Change master data in the task view.

   - OR -

   Click in the result list toolbar.

3. Edit the function area master data.
4. Save the changes.

Enter the following data for a functional area.

Related Topics

• One Identity Manager Compliance Rules Administration Guide

Attestors

Attestors

In One Identity Manager, you can assign employees to business roles that can be brought in as attestors in attestation cases when the approval workflow is set up accordingly. To do this, assign the business roles to application roles for attestors. A default application role for attestors is available in One Identity Manager. Assign employees that are authorized to attest permissions, requests or other data stored in the One Identity Manager to this application role. You may create other application roles as required. For more detailed information about implementing and editing application roles, see the One Identity Manager Application Roles Administration Guide.

To specify attestors

1. Select the category Business roles | Basic configuration data | Attestors.
2. Select Assign employees in the task view.

3. Assign employees in Add assignments.

   - OR -

   Remove employees from Remove assignments.

4. Save the changes.

Approvers and Approvers (IT)

Approvers and Approvers (IT)

In One Identity Manager, you can assign employees to business roles that can be brought in as approvers in approval procedures for IT Shop requests when the approval workflow is set up accordingly. To do this, assign the business roles to application roles for approvers. Default application roles for approvers and approvers (IT) are available in One Identity Manager. Assign employees that are authorized to approve requests in the IT Shop to this application role. You may create other application roles as required. For more detailed information about implementing and editing application roles, see the One Identity Manager Application Roles Administration Guide.

To specify a role approver or role approver (IT)

1. Select the category Business roles | Basic configuration data | Approver.

   - OR -

   Select the category Business roles | Basic configuration data | Approver (IT).

2. Select Assign employees in the task view.
3. Assign employees in Add assignments.

   - OR -

   Remove employees from Remove assignments.

4. Save the changes.

How to Edit Business Roles

Business roles are grouped by role class in the navigation view. Each business role is assigned to exactly one role class. You must define suitable role classes before you can add business roles. For more information, see Roles Classes.

To edit business roles

1. Select the category Business roles | <Role class>.
2. Select a business role in the result list. Select Change master data in the task view.

   - OR -

   Click in the result list toolbar.

3. Edit the business role's master data.
4. Save the changes.