立即与支持人员聊天
与支持团队交流

Identity Manager On Demand Hosted - Web Portal User Guide

General tips and getting started Requests
Setting up and configuring request functions Requesting products Saved for Later list Pending requests Displaying request history Canceling requests Renewing products with limit validity periods Unsubscribing products Displaying approvals Undoing approvals
Attestation Compliance Responsibilities
My responsibilities
Managing my departments Managing my application roles Managing my business roles Managing my identities Managing my cost centers Managing my locations Managing my system entitlements Managing my system roles
Delegating tasks Ownerships
Managing data
Managing identities Managing user accounts Managing system entitlements Managing departments Managing locations Managing cost centers Managing business roles Managing system roles
Appendix: Attestation conditions and approval policies from attestation procedures

Reactivating my identities

You can activate permanently deactivated identities if they have not been deactivated by certification.

To reactivate an identity

  1. Open the home page.

  2. On the home page, click Show in the My Direct Reports tile.

  3. On the Identities page, click the identity you want to activate.

  4. In the Edit Identity pane, expand the Organizational information section.

  5. In the Organizational Information pane, clear the Permanently deactivated check box.

  6. Click Save.

Assigning other managers to my identities

You can assign other managers to the identities for which you are responsible.

To assign a new manager to an identity

  1. Open the home page.

  2. On the home page, click Show in the My Direct Reports tile.

  3. On the Identities page, click the identity that you want to assign to a new manager.

  4. In the Edit Identity Data pane, click Assign to new manager.

  5. On the Shopping Cart page, click Edit next to Assign new manager.

  6. In the New manager assignment pane, in the New manager menu, select the manager you want to assign to the identity.

  7. (Optional) If the identity for which you are selecting a new manager already has entitlements or products assigned, they are removed or unsubscribed by default on the effective date. If you want the identity to retain these entitlements or products when transferring to the new manager, disable the check boxes next to the respective entitlements and products.

  8. (Optional) In the Reason field, enter why you are assigning a new manager.

  9. (Optional) In the Priority menu, select the priority.

  10. (Optional) To specify from when the new manager is responsible for the identity, enter the date in the Valid from field. If you leave the field blank, the change of manager will be carried out immediately after the new manager is approved.

  11. Click Save.

  12. On the Shopping Cart page, click Submit.

    NOTE: On the Pending Requests page, your request to change managers is presented to the new manager to be granted or denied approval (see Approving new managers' pending requests). After the new manager approves this requests, the new manager is assigned.

Related topics

Creating reports about my identities

You can create reports about identity data.

To create a report about an identity

  1. Open the home page.

  2. On the home page, click Show in the My Direct Reports tile.

  3. On the Identities page, click the identity for which you want to create a report.

  4. In the Edit Identity pane, click Download report.

Managing my identities' attestation cases

You can use attestation to test the balance between security and compliance within your company. Managers or others responsible for compliance can use One Identity Manager attestation functionality to certify correctness of permissions, requests, or exception approvals either scheduled or on demand. Recertification is the term generally used to describe regular certification of permissions. One Identity Manager uses the same workflows for recertification and attestation.

There are attestation policies defined in One Identity Manager for carrying out attestations. Attestation policies specify which objects are attested when, how often, and by whom.Once an attestation is performed, One Identity Manager creates attestation cases that contain all the necessary information about the attestation objects and the attestor responsible. The attestor checks the attestation objects. They verify the correctness of the data and initiate any changes that need to be made if the data conflicts with internal rules.

Attestation cases record the entire attestation sequence. Each attestation step in an attestation case can be audit-proof reconstructed. Attestations are run regularly using scheduled tasks. You can also trigger single attestations manually.

Attestation is complete when the attestation case has been granted or denied approval. You specify how to deal with granted or denied attestations on a company basis.

Detailed information about this topic
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级