Identity Manager 8.2.1 - Web Portal User Guide

User accounts are attested using the User account attestation attestation procedure.

For this attestation procedure you can use the following attestation conditions:

Condition	Description
All user accounts	Attests all user accounts.
All privileged user accounts	Attests all privileged user accounts.
User accounts in the target system	Select the target systems. Attests user accounts assigned to these target systems.
User accounts of specific employees	Select the identities. Attests user accounts assigned to these identities.
Specific user accounts	Select the user accounts to attest. Use and to switch between hierarchical and list view. Multi-select is possible.
User accounts with defined risk index	Specify a risk index range. Attests user accounts with a risk index in the chosen range.
User accounts with matching name	Enter part of a name of user accounts with access to attest. All user accounts that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
User accounts with employees in departments	Select the departments. Attests user accounts with identities assigned to these departments. Use and to switch between hierarchical and list view. Multi-select is possible.
User accounts of employees in child departments	Select the departments. Attests user accounts with identities assigned to these or their child departments. Use and to switch between hierarchical and list view. Multi-select is possible.
User accounts of employees with matching names	Enter part of a name of the identities with user accounts to attest. All identities that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
New or not attested for x days	Specify a number of days. Attests user accounts that have not been attested for the defined number of days.
All user accounts not assigned to an identity	Only attests user accounts not assigned to an identity (so-called orphaned user accounts).
Linked user accounts	Attests only user accounts that are assigned these identities.
Target system type	Select the target systems types. Attests user accounts in target system of this target system type.

For this attestation procedure, you can use the following attestation policies:

Attesting system entitlements

Approval policies	Description
Attestation by selected approvers	Click Assign/Change in the Attestors field and then select the identities that can make approval decisions about attestation cases.
Attestation by target system manager	Target system managers can be approved through attestation cases.

System entitlements are attested using the System entitlement attestation attestation procedure.

For this attestation procedure you can use the following attestation conditions:

Condition	Description
All system entitlements	Attests all system entitlements.
Specific system entitlements	Select the system entitlements to attest. Use and to switch between hierarchical and list view. Multi-select is possible.
No dynamic groups from Active Roles	Attests all system entitlements. Dynamic groups are ignored in the process.
System entitlements with defined risk index	Specify a risk index range. Attests system entitlements with a risk index in the chosen range.
System entitlements with matching name	Enter part of a name of system entitlements with access to attest. All system entitlements that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
System entitlements by applications	Select the applications. Attests system entitlements that are assigned to these applications.

For this attestation procedure, you can use the following attestation policies:

Attesting assignment of system entitlement to departments

Approval policies	Description
Attestation of system entitlements by product owner (OA)	Product owners of system entitlements can be approved through attestation cases.
Attestation by target system manager	Target system managers can be approved through attestation cases.

System entitlements assignments to departments are attested using the Attestation of system entitlement assignments to departments attestation procedure.

Condition	Description
All departments	Attests assignments of system entitlements to all departments.
All system entitlements	Attests assignments of all system entitlements to departments.
Attesting by attestation status	Select an attestation status Attests assignments of system entitlements, matching this attestation status, to departments. You can select the follow status: Denied memberships: Attests assignments that have been denied. All Memberships: Attests all assignments. New memberships: Attests assignments that have never been attested.
Specific departments	Select the departments with system entitlements to attest. Use and to switch between hierarchical and list view. Multi-select is possible.
Specific system entitlements	Select the with system entitlements with assignments to departments to attest.
Departments with defined risk index	Use the Lower limit and Upper limit fields to define a risk index range. Attests system entitlement assignments to departments with a risk index in the chosen range.
Departments with matching name	Enter part of a name of departments with system entitlement assignments to attest. All departments that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
New or not attested for x days	Specify a number of days. Attests system entitlement assignments to departments that have not been attested for the defined number of days.
System entitlements with defined risk index	Use the Lower limit and Upper limit fields to define a risk index range. Attests assignments of system entitlements, with a risk index in the chosen range, to departments.
System entitlements with matching name	Enter part of a name of system entitlements with assignments to departments to attest. All system entitlements that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

Attesting assignment of system entitlement to business roles

System entitlements assignments to business roles are attested using the Attestation of system entitlement assignments to business roles attestation procedure.

Condition	Description
All business roles	Attests assignments of system entitlements to all business roles.
All system entitlements	Attests assignments of all system entitlements to business roles.
Attesting by attestation status	Select an attestation status Attests assignments of system entitlements, matching this attestation status, to business roles. You can select the follow status: Denied memberships: Attests assignments that have been denied. All Memberships: Attests all assignments. New memberships: Attests assignments that have never been attested.
Specific business roles	Select the business roles with system entitlements to attest. Use and to switch between hierarchical and list view. Multi-select is possible.
Specific system entitlements	Select the with system entitlements with assignments to business roles to attest.
Business roles with specific role classes	Select the role classes. Attests system entitlement assignments to business roles with these role classes.
Business roles with defined risk index	Use the Lower limit and Upper limit fields to define a risk index range. Attests system entitlement assignments to business roles with a risk index in the chosen range.
Business roles with matching name	Enter part of a name of business roles with system entitlement assignments to attest. All business roles that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
New or not attested for x days	Specify a number of days. Attests system entitlement assignments to business roles that have not been attested for the defined number of days.
System entitlements with defined risk index	Use the Lower limit and Upper limit fields to define a risk index range. Attests assignments of system entitlements, with a risk index in the chosen range, to business roles.
System entitlements with matching name	Enter part of a name of system entitlement with assignments to business roles to attest. All system entitlements that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Identity Manager 8.2.1 - Web Portal User Guide

Attesting user accounts

Attesting system entitlements

Attesting assignment of system entitlement to departments

Attesting assignment of system entitlement to business roles