立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Company Policies Administration Guide

Company policies in One Identity Manager Defining company policies
Creating and editing company policies Using default company policies Deleting company policies Policy groups Compliance frameworks Schedules for checking policies Company policy attestors Policy supervisors for company policies Exception approvers for policy violations Standard reasons for policy violations Mail templates for company policy notifications
Checking company policies Automatic attestation of policy violations Mitigating controls for company policies General configuration parameter for company policies

Displaying the compliance frameworks overview

You can display the most important information about a compliance framework on the overview form.

You can obtain a summary of all a compliance framework's policy violations in the Policy violation overview report.

To obtain an overview of a compliance framework

  1. Select the Company Policies > Basic configuration data > Compliance frameworks category.

  2. Select the compliance framework from the result list.
  3. Select the Compliance framework overview task.

Schedules for checking policies

Regular testing of company policies is managed through schedules. In the default installation of One Identity Manager, the Policy check schedule is assigned to every new company policy. This schedule generates a processing task at regular intervals for the DBQueue Processor for every company policy. You can configure your own schedule to check policies on a cycle which suits your requirements. Ensure that the schedules are assigned to the policies.

To create or edit schedules

  1. In the Manager, select the Company Policies > Basic configuration data > Schedules category.

    The result list shows all schedules configured for the QERPolicy table.

  2. Select a schedule in the result list and run the Change main data task.

    – OR –

    Click in the result list.

  3. Edit the schedule’s main data.

  4. Save the changes.

Enter the following properties for a schedule.

Table 7: Schedule properties

Property

Meaning

Name

Schedule ID. Translate the given text using the button.

Description

Detailed description of the schedule. Translate the given text using the button.

Enabled

Specifies whether the schedule is enabled.

NOTE: Only active schedules are run. Active schedules are only run if the QBM | Schedules configuration parameter is set.

Time zones

Unique identifier for the time zone that is used for running the schedule. Choose between Universal Time Code or one of the time zones in the menu.

NOTE:

When you add a new schedule, the time zone is preset to that of the client from which you started the Manager.

Start (date)

The day on which the schedule should be run for the first time. If this day conflicts with the defined interval type, the first run is on the next available day based on the start date.

Validity period

Period within which the schedule is run.

  • If the schedule will be run for an unlimited period, select the Unlimited duration option.

  • To set a validity period, select the Limited duration option and enter the day the schedule will be run for the last time in End (date).

Occurs

Interval in which the task is run. Other settings may be required depending on the settings.

  • Every minute: The schedule is run once a minute. The starting point is calculated from the rate of occurrence and the interval type.

  • Hourly: The schedule is run at defined intervals of a multiple of hours such as every two hours.

    • Under Repeat every, specify after how many hours the schedule is run again.

    • The starting point is calculated from the rate of occurrence and the interval type.

  • Daily: The schedule is run at specified times in a defined interval of days such as every second day at 6am and 6pm.

    • Under Start time, specify the times to run the schedule.

    • Under Repeat every, specify after how many days the schedule is run again.

  • Weekly: The schedule is run at a defined interval of weeks, on a specific day, at a specified time such as every second week on Monday at 6am and 6pm.

    • Under Start time, specify the times to run the schedule.

    • Under Repeat every, specify after how many weeks the schedule is run again.

    • Specify the set day of the week for running the schedule.

  • Weekly: The schedule is run at a defined interval of months, on a specific day, at a specified time such as every second month on the 1st and the 15th at 6am and 6pm.

    • Under Start time, specify the times to run the schedule.

    • Under Repeat every, specify after how many months the schedule is run again.

    • Specify the days of the month (1st - 31st of the month).

    NOTE: If the Monthly interval type with the sub interval 29, 30 or 31 does not exist in this month, the last day of the month is used.

    Example:

    A schedule that is run on the 31st day of each month is run on April 30th. In February, the schedule is run on the 28th (or 29th in leap year).

  • Yearly: The schedule is run at a defined interval of years, on a specific day, at a specified time such as every year on the 1st, the 100th, and the 200th day at 6am and 6pm.

    • Under Start time, specify the times to run the schedule.

    • Under Repeat every, specify after how many years the schedule is run again.

    • Specify the days of the year (1st - 366th day of the year).

      NOTE: If you select the 366th day of the year, the schedule is only run in leap years.

  • Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, Sunday: The schedule is run on a defined day of the week, in specified months, at specified times such as every second Saturday in January and June at 10am.

    • Under Start time, specify the times to run the schedule.

    • Under Repeat every, specify after how many days of the month the schedule is run again. The values 1 to 4, -1 (last day of the week), and -2 (last day but one of the week) are permitted.

    • Specify in which month to run the schedule. The values 1 to 12 are permitted. If the value is empty, the schedule is run each month.

Start time

Fixed start time Enter the time in local format for the chosen time zone. If there is a list of start times, the schedule is started at each of the given times.

Repeat every

Rate of occurrence for running the schedule within the selected time interval.

Last planned run/Next planned run

Activation time calculated by the DBQueue Processor. Activation times are recalculated whilst the schedule is running. The time of the next run is calculated from the interval type, rate of occurrence, and the start time.

NOTE: One Identity Manager provides the start information in the time zone of the client where the program was started. Changes due to daylight saving are taken into account.

Assigning company policies to schedules

Use this task to assign company policies to the selected schedule that will run them. Using the assignment form you can assign the selected schedule to any of the company polices.

By default, company policies are assigned to the Policy check schedule.

NOTE: Assignments cannot be removed. Assignment of a schedule is compulsory for company policies.

To assign a company policy to a schedule

  1. In the Manager, select the Company Policies > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select Assign company policies.

  4. In the Add assignments pane, assign company policies.

  5. Save the changes.

To change an assignment

  1. In the Manager, select the Company Policies > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Assign company policies task.

  4. Select the Show objects already assigned to other objects menu item in the assignment form's context menu.

    This shows company policies that are already assigned in other schedules.

  5. In the Add assignments pane, double-click on one of these company policies.

    The company policy is assigned to the currently selected schedule.

  6. Save the changes.
  7. To put the changes into effect, enable the working copy.
Related topics

Starting schedules immediately

To start a schedule immediately

  1. In the Manager, select the Company Policies > Basic configuration data > Schedules category.

  2. Select the schedule in the result list.

  3. Select the Start immediately task.

    A message appears confirming that the schedule was started.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级