立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Identity Manager 9.1.2 - Compliance Rules Administration Guide

Compliance rules and identity audit

One Identity Manager users for identity audit Basic data for setting up rules

Assigning compliance rules to rule groups Displaying the rule group overview

Compliance frameworks

Assigning compliance rules to compliance frameworks Displaying the compliance frameworks overview

Schedules for checking rules

Default schedules for identity audit Assigning compliance rules to schedules Starting schedules immediately Displaying the schedule overview

Extended properties and property groups

Creating property groups for extended properties Creating and editing extended properties

Main data for extended properties

Assigning extended properties to property groups Assigning additional property groups to extended properties Specifying scope limits for extended properties Overview of extended properties Assigning objects to extended properties

Functional areas Compliance rules attestors Rule supervisors Exception approvers Standard reasons for rule violations

Predefined standard reasons for rule violations

Setting up a rule base

Creating and editing compliance rules

General main data for compliance rules Risk assessment for rule violations Extended data for compliance rules Rule comparison IT Shop properties for compliance rules

Additional tasks for working copies

Displaying the working copy overview Assigning compliance frameworks Mitigating controls

Assigning mitigating controls Creating mitigating controls

Enabling working copies Recalculating Copy rule Comparing a rule working copy with the original Maintaining exception approvers Maintaining rule supervisors Enabling SQL definition

Additional tasks for compliance rules

Displaying the compliance rule overview Creating working copies for compliance rules Enabling and disabling compliance rules Recalculating Copying compliance rules Maintaining exception approvers Maintaining rule supervisors

Creating rule conditions

Basics for using the Rule Editor Specifying the affected employee group Specifying affected entitlements A simple rule example Rule conditions in advanced mode Rule condition as SQL query

Deleting compliance rules

Checking compliance rules

Scheduled rule checking Rule checking rule modifications Ad-hoc rule checking Speeding up rule checking

Rule check analysis

Which employees violate a specific rule? Which rules are violated by a specific employee?

Reports about rule violations

Overview of all assignments

Granting exception approval

Exception approval over a limited period Granting exception approvals in the Manager

Notifications about rule violations

Requesting exception approval Notifications about rule violations without exception approval

Determining potential rule violations

Mail templates for notifying about identity auditing

Creating and editing mail definitions for Identity Audit Base objects for mail templates using Identity Audit Use of hyperlinks in the Web Portal Default functions for creating hyperlinks Editing mail templates for identity auditing

Mitigating controls for compliance rules

Creating and editing mitigating controls for compliance rules Assigning compliance rules to mitigating controls Displaying the mitigation controls overview Calculating mitigating controls fro compliance rules

Configuration parameters for Identity Audit

Creating and editing extended properties

To edit an extended property

In the Manager, select the Identity Audit > Basic configuration data > Extended properties > <property group> category.
Select the extended property in the result list. Select the Change main data task.

- OR -

Click in the result list.
Edit the extended property's main data.
Save the changes.

Main data for extended properties

Enter the following data for an extended property.

Table 6: Extended property main data
Property	Description
Extended property name	Name of the extended property.
Property group	The property group for structuring extended properties. You can assign a primary property group to a property on the main data form. Extended properties are grouped by this property group in navigation. If you have to assign an extended property to several property groups, you can assign additional property groups.
Lower scope limit	Lower scope limit for further subdivision.
Upper scope limit	Upper scope limit for further subdivision.
Description	Text field for additional explanation.
Spare field no. 01 ... Spare field no. 10	Additional company-specific information. Use the Designer to customize display names, formats, and templates for the input fields.

Related topics

Assigning extended properties to property groups

Each extended property must be assigned to at least one property group. Furthermore, you can assign the extended properties to any other property groups.

If you want to assign more properties to a property group, use the Assign extended properties task.

To assign extended properties to a property group

In the Manager, select the Identity Audit > Basic configuration data > Extended properties category.
Select a property group in the result list.
Select the Assign extended properties task.
In the Add assignments pane, assign extended properties.
TIP: In the Remove assignments pane, you can remove assigned extended properties.

To remove an assignment
- Select the extended property and double-click .
Save the changes.

Related topics

Assigning additional property groups to extended properties

Each extended property must be assigned to at least one property group. Furthermore, you can assign the extended properties to any other property groups. If an extended property needs to be assigned to several property groups, then you can use the Assign property groups task to assign additional property groups.

To assign an extended property to a property group

In the Manager, select the Identity Audit > Basic configuration data > Extended properties > <property group> category.
Select the extended property in the result list.
Select the Assign property groups task.
In the Add assignments pane, assign property groups.
TIP: In the Remove assignments pane, you can remove assigned property groups.

To remove an assignment
- Select the property group and double-click .
Save the changes.

Related topics

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 One Identity LLC. ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center