Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.1.5 - Compliance Rules Administration Guide

Table of Contents

Compliance rules and identity audit

One Identity Manager users for identity audit Basic data for setting up rules

Additional tasks for rule groups

Overview of rule groups Assigning rules

Compliance frameworks

Additional tasks for compliance frameworks

Compliance framework overview Assigning rules

Schedules for checking rules

Default schedules Additional tasks for schedules

Schedule overview Assigning rules Starting schedules immediately

Extended properties and property groups

Creating property groups Editing extended properties

Extended property master data Specifying scoped boundaries

Additional tasks for extended properties

Extended property overview Assign objects Assigning property groups

Functional areas Attestors Rule supervisors Exception approvers Standard reasons

Predefined standard reasons

Setting up a rule base

Setting up a rule Risk assessment Extended rule input Rule comparison IT Shop properties for a rule Additional tasks for working copies

Overview of the working copy Assigning compliance frameworks Mitigating controls

Assigning mitigating controls Creating mitigating controls

Enabling working copies Recalculating Copy rule Comparing a rule working copy with the original Maintaining exception approvers Maintaining rule supervisors Enabling SQL definition

Additional tasks for rules

Overview of the rule Creating a working copy Enabling and disabling rules Recalculating Copy rule Maintaining exception approvers Maintaining rule supervisors

Creating rule conditions

Basics for using the Rule Editor Specifying the affected employee group Specifying affected entitlements A simple rule example Rule conditions in advanced mode Rule condition as SQL query

Checking a rule

Scheduled rule checking Rule checking rule modifications Ad-hoc rule checking Speeding up rule checking

Rule check analysis

Which employees violate a specific rule? Which rules are violated by a specific employee?

Reports about rule violations

Overview of all assignments

Granting exception approval

Exception approval over a limited period Granting exception approvals in the manager

Notifications about rule violations

Request for exception approval Notifications about rule violations without exception approval

Determining potential rule violations

Creating custom mail templates for notifications

General properties of a mail template Creating and editing an email definition

Using base object properties Use of hyperlinks in the Web Portal

Default functions for creating hyperlinks

Customizing email signatures

Mitigating controls

Entering master data Additional tasks for mitigating controls

Mitigating controls overview Assigning rules

Calculating mitigation

Configuration parameters for Identity Audit

Comparing a rule working copy with the original

If you have made changes to the rule condition in a working copy, you can determine the effects of this using a comparison with the original rule. Rules can only be compared when an original of the working copy exists. The result of the rule comparison is displayed on the Rule comparison tab of master data form.

To compare a rule with the working copy.

Select the Identity Audit | Rules | Working copies of rules category.
Select the working copy in the result list.
Select the Change master data task.
Select the Rule comparison task.

Table 23: Results of a rule comparison
Rule violations	Lists all employees who, as a result of the change, would (not) violate the rule as follows
Newly added	Violate the rule for the first time
Identical	Still violate the rule
No longer included	Do not violate the rule anymore

To display the rule comparison as report

Select the Show rule comparison report.

Related topics

Rule comparison

Maintaining exception approvers

Use this task to maintain exception approvers for the selected rule. You can assign employees to the application role for exception approvers on the master data form and remove them from it.

NOTE: Changes apply to all the rules assigned to this application role.

To authorize employees as exception approvers

Select the Identity Audit | Rules | Working copies of rules category.
Select the working copy in the result list.
Select the Maintain exception approvers task.
In the Add assignments pane, double-click on the employees you want to assign be assigned to the application role.
– OR –

In the Remove assignments pane, double-click on the compliance rules that you want to remove.
Save the changes.

Related topics

Maintaining rule supervisors

Use this task to maintain rule supervisors for the selected rule. You can assign employees to the application role for rule supervisors on the master data form and remove them from it.

NOTE: Changes apply to all the rules assigned to this application role.

To authorize employees as rule supervisors

Select the Identity Audit | Rules | Working copies of rules category.
Select the working copy in the result list.
Select the Maintain rule supervisors task.
In the Add assignments pane, double-click on the employees you want to assign be assigned to the application role.
– OR –

In the Remove assignments pane, double-click on the compliance rules that you want to remove.
Save the changes.

Related topics

Enabling SQL definition

In certain cases, the rule condition can be formulated directly in SQL. For more information, see Rule condition as SQL query.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center