Memberships – System role (page description)
To open the Memberships – System Role page go to Responsibilities > Governance Administration > System Roles > Edit > Memberships.
On the Memberships – System role page, you can:
The following tables give you an overview of the different functions and content on the Memberships – System role page.
Table 948: Controls
|
Request memberships |
Use this button to request the system role for identities (see Assigning identities to system roles). |
|
Delete memberships |
Use this button to delete membership of selected identities in the system role (see Removing identities from my system roles).
Select the check box in front of the identities whose membership in the system role you want to delete and click this button. |
Table 949: Columns
|
Identity |
Shows you the name of the identity to which the system role is assigned. |
|
Origin |
Shows you whether the system role was assigned to the identity directly or indirectly. |
TIP: For each identity, you can see more useful information in the details pane. To do this, click the appropriate instance in the list. If the identity did not receive the membership through a direct assignment (for example, through an assignment request or delegation), the Request tab provides more information:
-
Information: Displays general information about a request. The information displayed varies and is dependent on the service category from which the request was triggered.
-
Workflow: Displays the life cycle chronologically as from the time of request.
-
Compliance: Displays possible rule violations for this request.
-
Entitlements: Show which entitlement are assigned to the role (if a role was requested).
TIP: You can show less data by using the column filters. For more information, see Filtering.
Entitlements – System role (page description)
To open the Entitlements - System Role page go to Responsibilities > Governance Administration > System Roles > Edit > Entitlements.
On the Entitlements – System role page, you can:
TIP: Entitlements form the basis for membership in an object (for example in a department).
The following tables give you an overview of the various features and content on the Entitlements – System role page.
Table 951: Columns
|
Entitlement |
Shows you the entitlement's name. |
|
Origin |
Shows you how the entitlement was assigned. For example, the entitlement might have been assigned through a dynamic role. |
|
Entitlement type |
Shows you the entitlement type (for example, report subscriptions, account definition, resources). |
TIP: You can show less data by using the column filters. For more information, see Filtering.
Compliance – System role (page description)
To open the Compliance - System Role page go to Responsibilities > Governance Administration > System Roles > Edit > Compliance.
On the Compliance - System Role page, you can view compliance rule violations caused by the system role (seeDisplaying system role rule violations).
The following table gives an overview of the content of the Compliance – System role page.
Table 952: Columns
|
Entitlement |
Shows the entitlement that caused the rule violation. |
|
Rule |
Shows the rule that was violated. |
|
Risk index |
Shows the severity of the rule violation (meaning the calculated risk index). The higher this value is, the higher the risk that this rule violation poses. |
|
Risk index (reduced) |
Shows the risk index taking mitigating controls into account. A rule’s risk index can be reduced by a significance amount after mitigating controls have been applied.
Mitigating controls are processes that exist outside the One Identity Manager solution and that reduce the risk of violation. For more information, see Compliance – Governance Administration. |
TIP: On the following tabs, you can show other useful information about each rule violation in the pane. To do this, click the corresponding entry in the list.
TIP: You can show less data by using the column filters. For more information, see Filtering.
Attestation – System role (page description)
To open the Attestation - System Role page go to Responsibilities > Governance Administration > System Roles > Edit > Attestation.
On the Attestation - System Role page you can:
The following tables give you overview of the various features and contents of the Attestation – System Role page.
Table 954: Controls in the attestation case's details pane
|
Actions > Send a reminder mail |
Use this action to display all identities that can make approval decisions about the attestation case Then you can send reminder emails to these identities (see Sending reminders about system role pending attestation cases). |
|
Show details |
You can use this button to display details about all the objects that are included in this attestation case |
Table 955: Columns
|
Display name |
Shows the name of the object included in the attestation case. |
|
Attestation policy |
Shows the name of the attestation policy in use. |
|
State |
Shows the current status of the attestation case.
The following status' are possible:
-
Pending: The attestation case is not closed yet and must still be approved.
-
Approved: The attestation case was approved. In the details pane, on the Workflow tab, you can see why the attestation case was granted approval.
-
Denied: The attestation case was denied. In the details pane, on the Workflow tab, you can see why the attestation case was denied approval. |
|
New |
Shows whether the attestation case is new. New cases have not been granted approval yet but might have been denied approval before. |
|
Due date |
Shows by when the attestation case must be completed. |
|
Risk index |
Show the attestation case's risk index. |
TIP: You can show less data by using the column filters. For more information, see Filtering.
