Entitlement based certification
If the data from the applications that need to be part of the review are already imported, then the UAR is ready to be configured. To configure an entitlement-focused certification, follow the steps below.
- Log in to webconsole and go to Access control > Access certification.
- Click on New Access Certification from the side menu and it will render the screen below.
Complete the form opened using the information from the table below.
| Field name | Required? | Description |
|---|---|---|
| Access Certification name | Y | Provide a descriptive name to uniquely identify your campaign. |
| Type of certification | Y | Determines if this is a user or application + entitlement-based review. In this case, select Application. |
| Description | N | Summary describing the goals of this campaign. |
| Status | Y | Indicates if the campaign is active or not. Active/inactive status impacts only the automatic schedule. It doesn’t impact the ability to launch campaign manually. |
| Scheduled interval | N | Allows you to automatically run the campaign at regular intervals such as annually, semi-annually, and quarterly. |
| Reference start date | N | If the campaign is to be run at regular intervals, then the reference start date is used to determine when the next iteration should be. Reference Start Date is the date to set the schedule for automatic run, it is not related to manual certification execution. |
| Email template | N | Email template that should be used for notifications. |
| Manager of access review | N | Manager of access review, or the UAR manager, is a person who will be overseeing the execution of the campaign. This person will have access to the UAR campaign dashboard and reports, as well as the ability to delegate requests. The UAR manager is different from a manager who is participating as a reviewer in a campaign. |
| Membership tags to exclude | N | Include any membership tags that you want to exclude to filter out irrelevant types of access assignments. More on membership tags can be found in this section. |
Click Save after completing the form as shown in the example below. This will save the UAR configuration and provide an access to the additional tabs to configure the review.
Defining applications participating in the review
- Click Access certification search, find your certification campaign and click Edit icon. You will be prompted to the campaign tabs used to further configure the campaign.
- Go to the Application tab and select applications you want to include into this campaign. Upon selecting it, you will be prompted to select the entitlements to review. There are several options:
- Use all entitlements - Means that all entitlements as per application are to be included into a review campaign.
- Select entitlements - Allows users to choose specific entitlements to be reviewed. It is useful when only a small number of entitlement requires a review.
- Exclude entitlements - Is used when some entitlements are less important to review and can be omitted.
To review a specific set of entitlements click on the application mane and this will update the UI so you can select entitlements in your application.
- As you select the entitlements needed for your review, check the box next to the entitlement needed to be selected/excluded. These entitlements will be moved to another table, shown below, to indicate that they have been selected for the review.
