Chat now with support
Chat with Support

Identity Manager 8.1.5 - Web Portal User Guide

Getting started Security keys (WebAuthn) Requests Attestation Compliance Responsibilities
My responsibilities
Employees System entitlements Business roles System roles Departments Cost centers Locations Application roles Resources Assignment resources Multi-request resources Multi-requestable/unsubscribable resources Software Devices Adding tags for service items
Task delegation Ownerships Auditing Governance administration
Applications Calls Settings Discovering your statistics on the start page

Compare and merge

You can compare and merge any combination of role types. For example, you can compare the properties of a business role and a department, take the properties you want from them and merge them. This function is available in the My Responsibilities menu for your responsibilities.

NOTE: You can only compare and merge roles that you own or you are their administrator.

To compare and merge roles

  1. Perform one of the following tasks:

    • Open Business Roles and select a business role.

    • Open the System Roles menu and select a system role.

    • Open Department and select a department.

    • Open Cost Center and select a cost center.

    • Open Locations and select a location.

  2. Select Compare and merge.

    This opens a dialog. Select a comparison role.

  3. Select a second role in Comparison role and merge using Assign next to Comparison role.

    NOTE: If a role is already selected, use Change to edit the selection.

    Memberships and entitlements of the selected roles containing the following information are listed:

    Table 57: Overview of the selected roles' assignments
    Column Description
    Object

    Display name of the assigned entitlement or membership, which occurs in one of the selected roles.

    Type

    Type of the entitlement or membership.

    Name of the source role

    Assignment type if the entitlement or membership. The following assignment types are available.

    • Direct
    • Inherited
    • Requested
    • Dynamic
    • Not assigned

    For more detailed information about "Basics for Assigning Company Resources", see the One Identity Manager Identity Management Base Module Administration Guide.

    Name of the second role See "Name of the source role".
    Comparison

    Name of the role with this assignment.

  4. View the assignments of both roles and click Merge the selected roles.

    NOTE: Use the filter function, which is available on nearly every column, to make the list of assignments clearer. For more information, see Filter.

    The Verify view is active. This lists the actions that need to run to merge the roles.

  5. Verify the suggested changes and enable/disable the actions, which should be either taken or not taken into account when the roles are merged.

  6. Click Next.

    Save changes to the script. This opens the Results view.

  7. Close the Compare and Merge dialog.

    If you have transferred all the properties of the second role by merging, this role is removed from the overview.

Restoring a previous state

In the History view you can roll back the current state of a business role to a state it has had in the past. In the process, you decide yourself which attributes to change. After selecting the business role, all attributes are displayed. These attributes can all be rolled back, with a few exceptions, to a historical state.

In the following table, reasons are listed that prevent roll back to a historical state.

Table 58: Factors preventing roll back
Factor Description
Attribute was not changed. Change is not possible without a comparative value.
Membership resulting from delegation. These memberships are not reset.
Inherited membership These memberships cannot be deleted.
Membership resulting from a dynamic group. These memberships cannot be deleted.

To roll back the state of a business role to a historical state

  1. Open Business Roles and select a business role.

  2. Select the Status comparison view under History.

  3. Use and to set the date and time.

    All the attributes for this business role are displayed in a list. These include business role properties, memberships, actions, amongst others. By default, all attributes are selected.

    NOTE: If you cannot select an attribute, the check box is not set.

  4. Disable the Roll back check box and set each attribute you want to roll back, separately.

  5. Confirm with Roll back changes.

    The selected attributes are displayed in the Roll back changes dialog. You can still change your choice by disabling enabled attributes.

    There are other actions available in the context menu View settings, which are listed in the following table.

    Table 59: Items in the menu "View Settings"

    Menu item

    Description

    Reset view

    Sets the view back to default after you have, for example, applied a filter.

    Save current view

    Save the current view to using with filters, for example.

    Reload data

    Reloads the data.

  6. Roll the selected business role attributes back to their historical state with Roll back.

Compliance reports

Details is available My Responsibilities. In this view, you can make an initial selection to obtain a thematic detail view.

  • Risk indexes and entitlements

    Shows all primary and secondary assigned member of the object type or the company structure. The member's assigned entitlements and risk indexes are displayed in the same way.

  • Policy violations

    Shows all current policy violations found for the object type or the company structure.

  • Compliance rule violations

    Shows all the member's current rule violations found for the object type or the company structure. Here you can resolve rule violations for marked violations. For more information, see Resolving rule violations.

To view details about an object type

  1. Perform one of the following tasks:

    • Open Business Roles and select a business role.
    • Open Department and select a department.
    • Open Cost Center and select a cost center.
    • Open Locations and select a location.

  2. Select Compliance reports and make an initial selection to obtain a thematic detail view.

Attestations

In My Responsibilities, you can view the attestation status for your responsibilities.

In Attestations, you can switch between the following views. Which view you see depends on the selected objects type or company structure.

  • Memberships

  • Entitlements of members

  • Permissions

  • All attestation cases

For each case you can see the current status and the creation date in the detailed content view. You can run the following action or get information.

  • See whether the case was approved or denied.

  • Obtain detailed information about the selected attestation case from the Information, Workflow, Attestation policy, and History tabs.

  • As attestor, you can view attestors for pending attestation cases.

  • Send a reminder.

To view attestations of the desired area of responsibility

  1. Perform one of the following tasks:

    • Open Business Roles and select a business role.

    • Open the System Roles menu and select a system role.

    • Open Department and select a department.

    • Open Cost Center and select a cost center.

    • Open Locations and select a location.

    • Open Resources and select a resource.

    • Open Assignment resources and select a resource.

    • Open Multi-request resources and select a resource.

    • Open Multi requestable/unsubscribable resources and select a resource.

    • Open the Software menu and select a software application.

  2. Select Attestations.

Detailed information about this topic
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating