Chat now with support
Chat with Support

Identity Manager 8.0 - Company Policies Administration Guide

Company Policies
One Identity Manager Users for Company Policies Base Data for Company Policies Defining Company Policies Checking Company Policies Creating Custom Mail Templates for Notifications
Mitigating Controls General Configuration Parameter for Company Policies

Assigning Company Policies

Assigning Company Policies

Use this task to assign company policies to the selected schedule, which will run them. By default, a company policy is assigned to the schedule "default schedule policies". Using the assignment form you can assign the selected schedule to any of the company polices.

To assign a schedule to a company policy

  1. Select the category Company Policies | Basic configuration data | Schedules.
  2. Select the schedule in the result list.
  3. Select the task Assign company policies.
  4. Double-click on the company policies you want to assign in Add assignments.
  5. Save the changes.

To change an assignment

  1. Select the category Company Policies | Basic configuration data | Schedules.
  2. Select the schedule in the result list.
  3. Select the task Assign company policies.
  4. Select Show objects already assigned to other objects in the assignment form context menu.

    This shows company policies that are already assigned in other schedules.

  5. Double-click on one of these company policies in Add assignments.

    The company policy is assigned to the currently selected schedule.

  6. Save the changes.
  7. To put the changes into effect, enable the working copy.

NOTE: Assignments cannot be removed. Assignment of a schedule is compulsory for company policies.
Related Topics

Starting Schedules Immediately

Starting Schedules Immediately

To start a schedule immediately

  1. Select the category Company Policies | Basic configuration data | Schedules.
  2. Select the schedule in the result list.
  3. Select Start immediately from the task view.

    A message appears confirming that the schedule was started.

Attestors

Attestors

Installed Module: Attestation Module

Employees that can be used to attest attestation procedures can be assigned to company policies. To do this, assign an application role for attestors to a company policy on the master data form. Assign employees to this application role that are authorized to attest company policies.

A default application role for attestors is available in One Identity Manager. You may create other application roles as required. For more information about application roles, see One Identity Manager Application Roles Administration Guide.

Table 7: Default Application Roles for Attestors
User Task

Company policy attestors

Attestors must be assigned to the application role Identity & Access Governance | Company policies | Attestors.

Users with this application role:

  • Attest company policies and exception approvals in the Web Portal for which they are responsible.
  • Can view the master data for these company policies but not edit them.

Note: This application role is available if the module Attestation Module is installed.

To edit attestors

  1. Select the category Company Policies | Basic configuration data | Attestors.
  2. Select Change master data in the task view.

    - OR -

    Select the application role in the result list. Select Change master data in the task view.

    - OR -

    Click in the result list toolbar.

  3. Edit the application role's master data.
    Property Value
    Parent application role Assign the application role Identity & Access Governance | Company policies | Attestors or a child application role.
  4. Save the changes.
  5. Select the task Assign employees, to add members to the application role.
  6. Assign employees in Add assignments.

    - OR -

    Remove employees from Remove assignments.

  7. Save the changes.

Policy Supervisors

Policy Supervisors

Employees that are responsible for the contents of company policies can be assigned to these company policies. To do this, assign an application role for policy supervisors to a company policy on the master data form.

A default application role for policy supervisors is available in One Identity Manager. You may create other application roles as required. For more information about application roles, see the One Identity Manager Application Roles Administration Guide.

Table 8: Default Application Role for Rule Supervisors
User Task

Policy supervisor

Policy supervisors must be assigned to the application role Identity & Access Governance | Company policies | Policy supervisors or another child application role.

Users with this application role:

  • Are responsible for the contents of company policies.
  • Edit working copies of company policies.
  • Enable and disable company policies.
  • Can calculation policies and view policy violations if required.
  • Assign mitigating controls.

To edit a policy supervisor

  1. Select the category Company Policies | Basic configuration data | Policy supervisors.
  2. Select Change master data in the task view.

    - OR -

    Select the application role in the result list. Select Change master data in the task view.

    - OR -

    Click in the result list toolbar.

  3. Edit the application role's master data.
    Property Value
    Parent application role Assign the application role Identity & Access Governance | Company policies | Policy supervisors or a child application role.
  4. Save the changes.
  5. Select the task Assign employees, to add members to the application role.
  6. Assign employees in Add assignments.

    - OR -

    Remove employees from Remove assignments.

  7. Save the changes.
Related Documents