You can rework existing conditions by editing copied attestation policies.
To add a condition to a policy
|
NOTE: The options available in Condition type depend on which attestation procedure is set for the attestation policy to be edited. |
The following options are available.
Condition Type |
Description |
---|---|
All roles / cost centers |
Lists all company structures. Multi-select is possible. Selected parameters are listed in the detailed content view and can be canceled again there. Or you cancel the selection in list again. |
Attestation by attestation status / Roles by assignment type |
Lists attestations by status or role assignment type as other parameter. Multi-select is possible. Selected parameters are listed in the detailed content view and can be canceled again there. Or you cancel the selection in list again. |
Specific roles / cost centers |
List certain roles for the company structure, You can toggle between tree view and list view using |
Business roles / Application roles / Cost centers with matching names |
Displays the Name text box. Enter a name for the company structure. |
New or not attested for x days |
Displays the Count text box. You can enter the count. |
Roles with specific owners / user accounts with specific people / Roles with any owner |
Lists certain employees for the company structure. Additional columns can be shown and the filter function applied. Multi-select is possible. Selected employees are listed in the detailed content view and can be canceled again there. Or you cancel the selection in list again. |
Roles with specific role classes |
Lists specific role classes. Multi-select is possible. Selected role classes are listed in the detailed content view and can be canceled again there. Or you cancel the selection in list again. |
Roles with defined risk index |
Display a scale of 0 to 1 for the risk index and two slide rulers. Specify a beginning and an end value within the scale. |
Roles with owners in departments |
Lists departments which have owners. Multi-select is possible. Selected role classes are listed in the detailed content view and can be canceled again there. Or you cancel the selection in list again. |
You can delete conditions in the Attestation Policies view. The same applies here as for adding conditions. You can only delete conditions in a copied attestation policy.
To remove a condition from a policy
This deletes the condition.
You can allow objects that apply for a specific or all conditions to be displayed in the Edit attestation policies view.
To allow affected objects to be displayed
All objects which meet the condition(s) are displayed in a dialog box.
You can update the object selection in the Edit attestation policies view to see modifications. This might be necessary for checking if you have added any new conditions, for example.
To update the object selection list
This reloads the object selection. New conditions, which may also be added to the , are also shown.Manager For more information, see the One Identity Manager Attestation Administration Guide.
© 2023 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy