Target systems
There are a number of statistics available to you for target systems. The following statistics are available.
Table 61: Target system statistics
Pending attestation by system entitlements |
Displays pending attestation by system entitlements. |
Number of user accounts with a risk index of more than {0} |
Displays the number of user accounts with a risk index more than specified value.
This statistic is also available for the number of entitlements with a risk index more than specified value. |
User accounts having risk higher {0} by domain |
Displays user accounts with a risk index more than specified value by domain.
This statistic contains other criteria.
- Entitlements having risk higher that a specified value by domain.
- Entitlements having risk higher that a specified value by department.
|
Employees without user accounts |
Displays identities without user accounts. |
Entitlements without requests |
Displays entitlements without a request.
This statistic contains other criteria.
- Active Directory
- Oracle E-Business Suite
- LDAP
- SAP R/3
- SharePoint
|
Groups with / without user account assignments |
Displays groups with or without user account assignments.
This statistic contains other criteria.
- Active Directory
- LDAP
- SAP R/3
- SharePoint
- Notes
- Groups, roles, and profiles with/without user account assignments SAP R/3
|
Inactive identities with enabled user accounts |
Displays inactive identities that have an enabled user account. |
Locked user accounts of enabled employees |
Displays locked user accounts of active identities. |
Appendix: Attestation conditions and approval policies from attestation procedures
When attestation policies are created or edited (see Setting up attestation policies or Editing attestation policies), you specify attestation conditions and approval policies:
-
Attestation procedures specify which objects to attest. They define the properties of the attestation objects to attest.
-
There are different attestation conditions for each attestation procedure that you use to specify which objects to attest.
-
Attestors for each attestation case are determined by approval policies.
In the following chapter, you will find more information about the various attestation procedures and associated approval policies and attestation conditions.
Attesting primary departments
Primary identity memberships in departments are attested using the Primary department attestation attestation procedure.
All departments |
Attests primary memberships in all departments. |
Specific departments |
Select the departments with primary memberships to attest.
Use and to switch between hierarchical and list view. Multi-select is possible. |
Specific child departments |
Select the departments with primary memberships to attest. In addition, primary memberships of all child departments under this department are attested.
Use and to switch between hierarchical and list view. Multi-select is possible. |
Departments with defined risk index |
Use the ruler to specify a risk index range. Attests primary memberships in departments with a risk index in the chosen range. |
Departments with matching name |
Enter part of a name of departments with primary memberships to attest. All departments that have this pattern in their name are included.
Example: Per finds "Person", "Personal", "Perfection" and so on. |
Attesting primary business roles
Primary identity memberships in business roles are attested using the Primary business role attestation attestation procedure.
All business roles |
Attests primary memberships in all business roles. |
Specific business roles |
Select the business roles with primary memberships to attest.
Use and to switch between hierarchical and list view. Multi-select is possible. |
Specific child business roles |
Select the business roles with primary memberships to attest. In addition, primary memberships of all child business roles under this business role are attested.
Use and to switch between hierarchical and list view. Multi-select is possible. |
Business roles with specific role classes |
Select the role classes. Attests primary membership in business roles with this role class. |
Business roles with defined risk index |
Use the ruler to specify a risk index range. Attests primary memberships in business roles with a risk index in the chosen range. |
Business roles with matching name |
Enter part of a name of business roles with primary memberships to attest. All business roles that have this pattern in their name are included.
Example: Per finds "Person", "Personal", "Perfection" and so on. |