Condition	Description
All roles	Attests memberships in all applications roles.
Application roles with matching name	Enter part of a name of application roles with primary memberships to attest. All application roles that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
Attesting by attestation status	Select an attestation status Attests memberships in application roles that match this attestation status. You can select the follow status: Denied memberships: Attests memberships that have been denied. All Memberships: Attests all memberships. New memberships: Attests memberships that have never been attested.
Specific employees	Select the identities. Attests identity memberships in application roles.
Specific employees with subidentities.	Select the identities. Attests identity memberships in application roles. In addition, this identity's subidentities memberships in application roles are attested.
Specific roles	Select the application roles. Attests memberships in these application roles. Use and to switch between hierarchical and list view. Multi-select is possible.
New or not attested for x days	Specify a number of days. Attests memberships in application roles that have not been attested for the defined number of days.
Roles by assignment type	Select how memberships in application roles must be assigned to enable attestation: Directly assigned: Attests memberships that were assigned directly. By request: Attests memberships that were requested. By delegation: Attests memberships that were delegated.

For this attestation procedure, you can use the following attestation policies:

Approval policies	Description
Attestation by selected approvers with automatic removal of assignments	Click Assign/Change in the Attestors field and then select the identities that can make approval decisions about attestation cases. Memberships are deleted if attestation is denied and the configuration fits.

Attestation of memberships in business roles

Memberships in business roles are attested using the Business role membership attestation attestation procedure.

For this attestation procedure you can use the following attestation conditions:

Condition	Description
All roles	Attests memberships in all business roles.
Business roles with matching name	Enter part of a name of business roles with memberships to attest. All business roles that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
Attesting by attestation status	Select an attestation status Attests memberships in business roles that match this attestation status. You can select the follow status: Denied memberships: Attests memberships that have been denied. All Memberships: Attests all memberships. New memberships: Attests memberships that have never been attested.
Specific employees	Select the identities. Attests identity memberships in business roles.
Specific employees with subidentities.	Select the identities. Attests identity memberships in business roles. In addition, this identity's subidentities memberships in business roles are attested.
Specific roles	Select the business roles. Attests memberships in these business roles. Use and to switch between hierarchical and list view. Multi-select is possible.
New or not attested for x days	Specify a number of days. Attests memberships in business roles that have not been attested for the defined number of days.
Roles with specific owners	Select the identities. Attests memberships in business roles of identities who are owners of these business roles.
Roles with specific role classes	Select the role classes. Attests membership in business roles of this role class.
Roles with defined risk index	Use the ruler to specify a risk index range. Attests memberships in business roles with a risk index in the chosen range.
Roles with any owner	Attests all memberships in business roles that have an owner.
Roles with owners in departments	Select the departments. Attests all business roles that have an owner in the selected department.
Roles by assignment type	Select how memberships in business roles must be assigned to enable attestation: Directly assigned: Attests memberships that were assigned directly. By request: Attests memberships that were requested. By delegation: Attests memberships that were delegated. By dynamic role: Attests memberships that were attested through dynamic roles.

For this attestation procedure, you can use the following attestation policies:

Approval policies	Description
Attestation by selected approvers with automatic removal of assignments	Click Assign/Change in the Attestors field and then select the identities that can make approval decisions about attestation cases. Memberships are deleted if attestation is denied and the configuration fits.

Attesting assignment of memberships in system roles

Memberships in system roles are attested using the System role membership attestation attestation procedure.

For this attestation procedure you can use the following attestation conditions:

Condition	Description
All roles	Attests memberships in all system roles.
System roles with matching name	Enter part of a name of system roles with memberships to attest. All system roles that have this pattern in their name are included. Example: Per finds "Person", "Personal", "Perfection" and so on.
Attesting by attestation status	Select an attestation status Attests memberships in system roles that match this attestation status. You can select the follow status: Denied memberships: Attests memberships that have been denied. All Memberships: Attests all memberships. New memberships: Attests memberships that have never been attested.
Specific roles	Select the system roles. Attests memberships in these system roles. Use and to switch between hierarchical and list view. Multi-select is possible.
New or not attested for x days	Specify a number of days. Attests memberships in system roles that have not been attested for the defined number of days.
Roles with specific owners	Select the identities. Attests memberships in system roles of identities who are owners of these system roles.
Roles with defined risk index	Use the ruler to specify a risk index range. Attests memberships in system roles with a risk index in the chosen range.
Roles with any owner	Attests all memberships in system roles that have an owner.
Roles with owners in departments	Select the departments. Attests all system roles that have an owner in the selected department.
System roles by applications	Select the applications (Application Governance). Attests memberships in system roles assigned to these applications.
Roles by assignment type	Select how memberships in system roles must be assigned to enable attestation: Directly assigned: Attests memberships that were assigned directly. By request: Attests memberships that were requested. Inherited: Attests inherited memberships.

For this attestation procedure, you can use the following attestation policies:

Approval policies	Description
Attestation by selected approvers with automatic removal of assignments	Click Assign/Change in the Attestors field and then select the identities that can make approval decisions about attestation cases. Memberships are deleted if attestation is denied and the configuration fits.

Attesting device owners

Owners of devices are attested by using the Device ownership attestation attestation procedure.

Condition	Description
All devices	Attests owners of all the devices.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Identity Manager 9.1.2 - Web Designer Web Portal User Guide

Attesting memberships in application roles

Attestation of memberships in business roles

Attesting assignment of memberships in system roles

Attesting device owners