立即与支持人员聊天
与支持团队交流

Identity Manager 9.2.1 - Attestation Administration Guide

Attestation and recertification
One Identity Manager users for attestation Attestation base data Attestation types Attestation procedure Attestation schedules Compliance frameworks Chief approval team Attestation policy owners Standard reasons for attestation Attestation policies Sample attestation Grouping attestation policies Custom mail templates for notifications Suspending attestation Automatic attestation of policy violations
Approval processes for attestation cases
Approval policies for attestations Approval workflow for attestations Selecting attestors Setting up multi-factor authentication for attestation Prevent attestation by identity awaiting attestation Automatic acceptance of attestation approvals Phases of attestation Attestation by peer group analysis Approval recommendations for attestations Managing attestation cases
Attestation sequence Default attestations Mitigating controls Setting up attestation in a separate database Configuration parameters for attestation

Deleting mail templates for attestation

To delete a mail template

  1. In the Manager, select the Attestation > Basic configuration data > Mail templates category.

    This shows all the mail templates that can be used for attestation cases in the result list.

  1. Select the template in the result list.

  2. Click in the result list.

  3. Confirm the security prompt with Yes.

Custom notification processes

Set up customized processes to send more email notifications within an attestation case. You can use following events for generating processes.

Table 18: Events for the AttestationHelper object

Event

Triggered by

DecisionRequired

New attestation case created

Move to the next approval level

Remind

Reminder interval expired

Table 19: Events for the AttestationCase object

Event

Triggered by

Granted

Approval granted for an approval step.

Dismissed

Approval denied for an approval step.

OrderGranted

Approval granted for an entire approval procedure.

FinalDismissed

Approval denied for an entire approval procedure.

QueryToPerson

Making a query

AnswerFromPerson

Answering a query

RecallQuery

Recalling a query

Escalate

Attestation case escalated.

Aborted

Attestation case canceled.

Canceled

Obsolete attestation case canceled.

For more information about creating processes, see the One Identity Manager Configuration Guide.

Suspending attestation

To suspend attestation you have two options.

  1. Disable the schedule assigned to the attestation policy.

    As long as the schedule is disabled, no new attestation cases will be generated. This applies to all attestation policies that have this schedule assigned to them.

    For more information, see Attestation schedules.

  2. Disable the attestation policy

    Once an attestation policy is disabled, no new attestation cases are generated. In addition, all associated attestation cases are deleted. To avoid loosing the attestation history in the process, you can configure how data changes are logged.

    For more information, see Disabling attestation policies.

  3. Disable the policy collection.

    Once a policy collection is disabled, all associated attestation policies are disabled.

    For more information, see Disabling policy collections.

Related topics

Automatic attestation of policy violations

NOTE: This functionality is only available if the Company Policies Module in installed.

Automatic recertification of the affected entitlements can be provided for policy violations. As a result of recertification, entitlements that should not be used anymore can be automatically deactivated or removed. This functionality is used by default in the context of Behavior Driven Governance. However, you can also use this functionality for your own company policies and related authorization checks.

For more information about how to configure attestation of policy violations, see One Identity Manager Company Policies Administration Guide. For more information about Behavior Driven Governance, see the One Identity Manager Administration Guide for Behavior Driven Governance.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级