Condition	Description
All PAM account groups	Attests all PAM account groups.
Specific PAM account groups	Select the PAM account groups to attest.
PAM user accounts on specific systems PAM account groups on specific systems	Select the PAM appliances with PAM user accounts to attest. Select the PAM appliances with PAM account groups to attest.
PAM account groups with matching name	Enter part of a name of PAM account groups with access to attest. All PAM account groups that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

PAM directory accounts are attested using the PAM directory account attestation attestation procedure.

Condition	Description
All PAM directory accounts	Attests all PAM directory accounts.
Specific PAM directory accounts	Select the PAM directory accounts to attest.
PAM directory accounts on specific directories	Select the directories. Attests directory accounts that are found in this directory.
PAM directory accounts with matching name	Enter part of a name of PAM directory accounts with access to attest. All PAM directory accounts that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

PAM access are attested using the PAM access attestation attestation procedure.

Condition	Description
All PAM accesses	Attests all PAM access.
Specific PAN asset accounts	Select the PAM asset accounts with access to attest.
Specific PAM assets	Select the PAM assets with access to attest.
Specific PAM user accounts	Select the PAM user accounts with access to attest.
Specific PAM directory accounts	Select the PAM directory accounts with access to attest.
Specific PAM directories	Select PAM directories. Attests access to these PAM directories.
Specific access type	Select access types. Attests access that uses one of these access types.
PAM user accounts mapped to specific employees	Select the identities. Attests access through PAM user accounts with these identities assigned to them.
PAM user accounts with defined risk index	Use the ruler to specify a risk index range. Attests access through PAM user accounts with a risk index in the chosen range.
PAM user accounts with matching name	Enter part of a name of PAM user accounts with access to attest. All PAM user accounts that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

Department properties are attested using the Department attestation attestation procedure.

Condition	Description
All departments	Attests all departments.
Specific departments	Select the departments to attest. Use and to switch between hierarchical and list view. Multi-select is possible.
Departments with defined risk index	Use the ruler to specify a risk index range. Attests departments with a risk index in the chosen range.
Departments with matching name	Enter part of a name of departments with access to attest. All departments that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.

Approval policies	Description
Attestation by selected approvers	Click Assign/Change in the Attestors field and then select the identities that can make approval decisions about attestation cases.
Attestation of departments by manager	Department managers can make approval decisions through attestation cases.

Identity Manager 8.2 - Web Designer Web Portal User Guide