To start a schedule immediately
- Select the Identity Audit | Basic configuration data | Schedules category.
- Select the schedule in the result list.
- Select the Start immediately task.
A message appears confirming that the schedule was started.
Compliance rules and identity audit
One Identity Manager users for identity audit
Basic data for setting up rules
Mitigating controls
Configuration parameters for Identity Audit
Rule groups
Compliance frameworks
Schedules for checking rules
Extended properties and property groups
Functional areas
Attestors
Rule supervisors
Exception approvers
Standard reasons
Setting up a rule base
Creating rules
rule check
Setting up a rule
Risk assessment
Extended rule input
Rule comparison
IT Shop properties for a rule
Additional tasks for working copies
Creating rule conditions
Overview of the working copy
Assigning compliance frameworks
Mitigating controls
Enabling working copies
Recalculating
Copy rule
Comparing a rule working copy with the original
Maintaining exception approvers
Maintaining rule supervisors
Enabling SQL definition
Additional tasks for rules
Basics for using the Rule Editor
Specifying the affected employee group
Specifying affected entitlements
A simple rule example
Rule conditions in advanced mode
Rule condition as SQL query
Deleting rules
Checking a rule
Creating custom mail templates for notifications
Scheduled rule checking
Rule checking rule modifications
Ad-hoc rule checking
Speeding up rule checking
Rule check analysis
Reports about rule violations
Granting exception approval
Notifications about rule violations
Determining potential rule violations
Starting schedules immediately
Extended properties and property groups
You can use extended properties to access properties in rule conditions that are not mapped in the One Identity Manager data model. It may be necessary, depending on the range of rule base, to maintain a large number of extended properties. Therefore, you can group properties into property groups.
To assign extended properties
- First, set up a property group, under which the extended properties will be grouped.
- Set up the extended properties in the property group.
- Assign the extended properties to the objects.
There can be any number of objects of different object types assigned to an extended property at this point.
Creating property groups
Property groups are used to group extended properties. Each extended property must be assigned to at least one property group. Furthermore, you can assign the extended properties to any other property groups.
To create a property group
-
In the Manager, select the Identity Audit | Basic configuration data | Extended properties category.
-
Click
in the result list.
-
Enter a name and description for the property group.
-
Save the changes.
To assign extended properties to a property group
-
In the Manager, select the Identity Audit | Basic configuration data | Extended properties category.
-
Select a property group in the result list.
-
Select the Assign extended properties task.
-
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.
To remove an assignment
- Select the extended property and double-click
.
- Select the extended property and double-click
-
Save the changes.
Editing extended properties
To edit an extended property
-
In the Manager, select the Identity Audit | Basic configuration data | Extended properties | <property group> category.
-
Select the extended property in the result list. Select the Change master data task.
- OR -
Click
-
Edit the extended property's master data.
-
Save the changes.