Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.1.5 - Compliance Rules Administration Guide

Table of Contents

Compliance rules and identity audit

One Identity Manager users for identity audit Basic data for setting up rules

Additional tasks for rule groups

Overview of rule groups Assigning rules

Compliance frameworks

Additional tasks for compliance frameworks

Compliance framework overview Assigning rules

Schedules for checking rules

Default schedules Additional tasks for schedules

Schedule overview Assigning rules Starting schedules immediately

Extended properties and property groups

Creating property groups Editing extended properties

Extended property master data Specifying scoped boundaries

Additional tasks for extended properties

Extended property overview Assign objects Assigning property groups

Functional areas Attestors Rule supervisors Exception approvers Standard reasons

Predefined standard reasons

Setting up a rule base

Setting up a rule Risk assessment Extended rule input Rule comparison IT Shop properties for a rule Additional tasks for working copies

Overview of the working copy Assigning compliance frameworks Mitigating controls

Assigning mitigating controls Creating mitigating controls

Enabling working copies Recalculating Copy rule Comparing a rule working copy with the original Maintaining exception approvers Maintaining rule supervisors Enabling SQL definition

Additional tasks for rules

Overview of the rule Creating a working copy Enabling and disabling rules Recalculating Copy rule Maintaining exception approvers Maintaining rule supervisors

Creating rule conditions

Basics for using the Rule Editor Specifying the affected employee group Specifying affected entitlements A simple rule example Rule conditions in advanced mode Rule condition as SQL query

Checking a rule

Scheduled rule checking Rule checking rule modifications Ad-hoc rule checking Speeding up rule checking

Rule check analysis

Which employees violate a specific rule? Which rules are violated by a specific employee?

Reports about rule violations

Overview of all assignments

Granting exception approval

Exception approval over a limited period Granting exception approvals in the manager

Notifications about rule violations

Request for exception approval Notifications about rule violations without exception approval

Determining potential rule violations

Creating custom mail templates for notifications

General properties of a mail template Creating and editing an email definition

Using base object properties Use of hyperlinks in the Web Portal

Default functions for creating hyperlinks

Customizing email signatures

Mitigating controls

Entering master data Additional tasks for mitigating controls

Mitigating controls overview Assigning rules

Calculating mitigation

Configuration parameters for Identity Audit

Additional tasks for rules

After you have entered the master data, you can run the following tasks.

Overview of the rule

Creating a working copy

Enabling and disabling rules

Maintaining exception approvers

Maintaining rule supervisors

Overview of the rule

You can see the most important information about a rule on the overview form.

To obtain an overview of a rule

Select the Identity Audit | Rules category.
Select the rule in the result list.
Select the Shelf overview task.

Creating a working copy

To modify an existing rule, you need to make a working copy. The working copy can be created from the existing rule. The working copy data can be used to overwrite the rule as required.

To create a working copy

Select the Identity Audit | Rules category.
Select the rule in the result list.
Select the Create working copy task.
Confirm the security prompt with Yes.

TIP: All working copies with a different condition to that of the original rule are displayed in the Identity audit | Rules | Working copies of rules | Modified working copies category.

Enabling and disabling rules

Enable the rule so that rule violation can be found. To exclude rules from testing, you can disable them. Any existing rule violations are removed by the DBQueue Processor. The working copy rule is always disabled.

To enable a rule

Select the Identity Audit | Rules category.
Select the rule in the result list.
Select the Enable rule task.

To display a rule

Select the Identity Audit | Rules category.
Select the rule in the result list.
Select the Disable rule task.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center