Assign Objects

Assign Objects

You can assign extended properties to company resources, hierarchical roles and employees.

To assign objects to an extended property

1. Select the category Identity Audit | Basic configuration data | Extended properties | <property group>.

2. Select the extended property in the result list.

3. Select Assign objects in the task view.
4. Select the desired object type in Select object type.

   The object belonging to the object types are displayed on the form.

5. Assign objects in Add assignments.

   - OR -

   Remove objects in Remove assignments.

6. Save the changes.

Assign Property Groups

Assign Property Groups

Each extended property must be assigned to at least one property group. Furthermore, you can assign the extended properties to any other property groups.

To assign an extended property to a property group

1. Select the category Identity Audit | Basic configuration data | Extended properties | <property group>.

2. Select the extended property in the result list.

3. Select Assign property groups in the task view.
4. Assign property groups in Add assignments.

   - OR -

   Remove property groups in Remove assignments.

5. Save the changes.

Functional Areas

Functional Areas

To analyze rule checks for different areas of your company in the context of identity audit, you can set up functional areas. Functional areas can be assigned to hierarchical roles and service items. You can enter criteria that provide information about risks from rule violations for functional areas and hierarchical roles. To do this, you specify how man rule violations are permitted in a functional area or a role. You can enter separate assessment criteria for each role, such as a risk index or transparency index.

Example for using Functional Areas

The risk of rule violation should be analyzed for cost centers. Proceed as follows:

1. Set up functional areas.
2. Assign cost centers to the functional areas.
3. Define assessment criteria for the cost centers.
4. Define assessment criteria for the functional areas.
5. Assign compliance rules required for the analysis to the functional area.
6. Use the One Identity Manager report function to create a report that prepares the result of rule checking for the functional area by any criteria.

To edit functional areas

1. Select the category Identity Audit | Basic configuration data | Functional areas.
2. Select the functional area in the result list. Select Change master data in the task view.

   - OR -

   Click in the result list toolbar.

3. Edit the function area master data.
4. Save the changes.

Enter the following data for a functional area.

Attestors

Attestors

Employees that can be used to attest attestation procedures can be assigned to compliance rules. Assign an application role for attestors to the compliance rules. Assign employees to this application role that are authorized to attest compliance rules.

A default application role for attestors is available in One Identity Manager. You may create other application roles as required. For more information about application roles, see One Identity Manager Application Roles Administration Guide.

To edit attestors

1. Select the category Identity Audit | Basic configuration data | Attestors.
2. Select Change master data in the task view.

   - OR -

   Select an application role in the result list. Select Change master data in the task view.

   - OR -

   Click in the result list toolbar.

3. Edit the application role's master data.

   Property	Value
   Parent application role	Assign the application role Identity & Access Governance | Identity Audit | Attestors or a child application role.

4. Save the changes.
5. Select the task Assign employees, to add members to the application role.
6. Assign employees in Add assignments.

   - OR -

   Remove employees from Remove assignments.

7. Save the changes.