立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Web Portal User Guide

General tips and getting started Managing reports Requests
Setting up and configuring request functions Requesting products Managing the Saved for Later list Pending requests Displaying request history Canceling requests Renewing products with limit validity periods Unsubscribing products Displaying requests Undoing approvals Managing request inquiries directed at you
Attestation
Managing attestations Pending attestations Displaying attestation history Managing attestation inquiries directed at you
Compliance Managing risk index functions Responsibilities
My responsibilities
Managing my departments Managing my application roles Managing my devices Managing my business roles Managing my identities Managing my cost centers Managing my multi-request resources Managing my multi requestable/unsubscribable resources Managing my resources Managing my software applications Managing my locations Managing my system entitlements Managing my system roles Managing my assignment resources
Managing task delegations Ownerships
Managing data
Managing departments Managing user accounts Managing business roles Managing identities Managing cost centers Managing multi-request resources Managing multi requestable/unsubscribable resources Managing resources Managing locations Managing system entitlements Managing system roles Managing assignment resources
Opening other web applications Managing tickets Appendix: Attestation conditions and approval policies from attestation procedures

Copying attestation policies

You can copy existing attestation policies and then edit them. For example, if you want to make changes to a default attestation policy, you can copy it, edit the copy, and then use it.

Copied attestation policies can be deleted again.

To copy an attestation policy

  1. In the menu bar, click Attestation > Attestation Policies.

  2. On the Attestation Policies page, next to the attestation policy you want to copy, click Actions > Copy.

    TIP: To show disabled attestation policies, delete the Activated attestation policies option. To do this, click next to the filter (Clear filter).

  3. In the Copy Attestation Policy pane, edit the attestation policy's main data.

  4. To specify which objects to attest, perform one of the following actions:

    • To add a new condition, under Objects To Be Attested by This Attestation Policy click Add another condition.

    • To edit an existing condition, under Objects To Be Attested by This Attestation Policy, click the condition.

    • To delete an existing condition, click (Delete condition).

  5. In the Condition type menu, click the condition type to use (see Appendix: Attestation conditions and approval policies from attestation procedures).

    NOTE: The options available in the Condition type menu depends on which attestation procedure is configured for the attestation policy.
  6. (Optional) Depending on which condition type you have selected, you can filter the selection of objects to attest (see Appendix: Attestation conditions and approval policies from attestation procedures).

  7. (Optional) Create or modify more conditions if required. To do this, click Add another condition.

  8. (Optional) If you have specified more than one condition, you must specify whether one or all of the conditions must be fulfilled by enabling the appropriate option:

    • All conditions must be fulfilled: The next time the attestation policy is run, new attestation cases are added for all objects fulfilling all of the conditions. If one of the objects to attest does not fulfill a condition, this object is not attested. In addition, use of this option generates a intersecting set of all the individual conditions of the selected objects.

    • At least one condition must be fulfilled: The next time the attestation policy is run, new attestation cases are added for all objects that fulfill at least one of the conditions. Use of this option generates a superset of all the individual conditions of the selected objects.

  9. Click Create.

Related topics

Deleting attestation policies

You can delete attestation policies that are not used anymore.

NOTE: You can only delete attestation policies if no attestation cases are associated with it anymore.

To delete an attestation policy

  1. In the menu bar, click Attestation > Attestation Policies.

  2. (Optional) To display disabled attestation policies, clear the Activated attestation policies only filter on the Attestation Policies page. To do this, click next to the filter (Clear filter).

  3. On the Manage Attestation Policies page, click (Actions) > Delete next to the attestation policy you want to delete.

  4. In the Delete attestation policy dialog, confirm the prompt with Yes.

Starting attestation

In the Web Portal, there are two ways for you to set up attestation cases for an attestation policy: you can trigger attestation with a scheduled task or start selected objects individually.

NOTE: You cannot start attestation with attestation policies in the In Processing state.

To start attestation using a scheduled task

  1. In the menu bar, click Attestation > Attestation Policies.

  2. (Optional) To display disabled attestation policies, clear the Activated attestation policies only filter on the Attestation Policies page. To do this, click (Clear filter) next to the filter.

  3. Click the attestation policy that you want to start attesting.

  4. In the Edit attestation policy pane, deselect the Disabled box.

  5. In the Calculation schedule menu, specify how often an attestation run with this attestation policy is started.

    Each attestation run creates a new attestation case respectively.

  6. Click Save.

To start attestation for selected objects

  1. In the menu bar, click Attestation > Attestation Policies.

  2. On the Attestation Policies page, click Actions > Start attestation next to the attestation policy you want to start attesting.

  3. In the Start attestation pane, perform one of the following actions:

    • To start attesting an object, click Start attestation next to the object.

    • To start attesting several object, select the check box in front of each object and click Start attestation for selected.

    • To start attesting all objects, click Start attestation for all.

Related topics

Running sample attestations

You can perform attestations only for a subset of identities. For example, when attesting all identities would take too long. Samples contain identities that you can use to conduct a sample attestation.

To use sample data in an attestation, assign a sample to the corresponding attestation policy and start the attestation.

To run a sample attestation

  1. In the menu bar, click Attestation > Attestation Policies.

  2. (Optional) To display disabled attestation policies, clear the Activated attestation policies only filter on the Attestation Policies page. To do this, click (Clear filter) next to the filter.

  3. Click the attestation policy you want to use for the sample attestation.

  4. In the details pane, in the Sample menu, select the sample you want to use.

  5. Click Save.

    NOTE: If the attestation policy is enabled and a schedule is set up, the sample attestation is automatically carried out on the selected date and you do not need to take any further action.

  6. On the Attestation Policies page, click Actions > Start attestation next to the attestation policy you want to use for the sample attestation.

  7. In the Start attestation pane, perform one of the following actions:

    • To start attesting an object, click Start attestation next to the object.

    • To start attesting several objects, select the check box in front of each object and click Start attestation for selected.

    • To start attesting all objects, click Start attestation for all.

Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级