Page Comparison

...

Create a campaign run

1. From the Navigation Sidebar of the EmpowerID Web interface, expand Role Mining and click Role Mining Campaign.
2. From

   On the navbar, expand Role Management and click Role Mining.

3. On the Role Mining

   Campaign

   page,

   click the Campaigns tab

   select the Campaigns tab and search for the campaign you want to configure.

4. From the grid, click

   the 

   the Campaign Name

    link

    link for the campaign.

   Image RemovedImage Added

5. From

   the 

   the Role Mining Campaign Details

    page

    page for the campaign that appears, click

   the 

   the Runs tab and then click

   the 

   the Add

    button

    button on the grid.

   Image RemovedImage Added

6. In

   the 

   the Role Mining Parameters

    section

    section of the form do the following:

   • Select whether you

   want 

   • want User Similarity

    to

   •  to be included in the run. User Similarity is an optional calculation that is useful to see what percentage of the entitlements users share.

   • Select a scoring method from

   the 

   • the Scoring Method

    drop

   •  drop-down. When selecting a scoring method, you have the following options:

     • perms+users - Includes both permissions and users in the candidate roles output by the run

     • perms - Includes just permissions in the candidate roles output by the run

     • users - Includes just users in the candidate roles output by the run

   • Review the attributes in

   the 

   • the Attributes

    grid

   •  grid. You can add new attributes to the run or remove existing attributes. You can also edit the weight associated with each, by clicking the Edit button for the attribute. Lower numbers have greater weight.

   Image Removed
   

7. In

   the 

   the Entitlement

    section

    section of the form do the following:

   • In

   the 

   • the Max Entitlements in Role

    field

   •  field, specify the maximum number of entitlements you want to be included in the candidate roles produced by the run.

   • In

   the 

   • the Max Users in Role

    field

   •  field, specify the maximum number of users you want to be included in the candidate roles produced by the run.

   • In

   the 

   • the Max Roles

    field

   •  field, specify the maximum number of candidate roles you want to be produced by the run.

   • In

   the 

   • the Min Entitlements in Role

    field

   •  field, specify then minimum number of entitlements you want to be included in the candidate roles produced by the run.

   • In

   the 

   • the Min Users in Role

    field

   •  field, specify then minimum number of users you want to be included in the candidate roles produced by the run.

   • In

   the 

   • the Entitlement Weight

    field

   •  field, specify the weight for the entitlements. The lower the number, the greater the weight.

8. When you have completed the above, the Entitlement section of the form should look similar to the below image.
   Image Removed
   In the Attribute section

   In the Attribute section of the form do the following:

   • Specify the attribute weight by entering that number in

   the 

   • the Attribute Weight

    field

   •  field. The lower the number the greater the weight.

   • Specify then maximum number of attributes you want to be included in the candidate roles produced by the run by entering that number in

   the 

   • the Max Attributes in Role

    field

   •  field.

9. Optionally, in

   the 

   the Excluded Entitlement Queries

    section

    section search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude accounts with expired passwords from the run, you select

   the 

   the Accounts with expired password

    set

    set.

   Image Removed
   

10. Optionally, in

    the 

    the Excluded People Queries

     section

     section search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude people who have accounts with expired passwords from the run, you select

    the 

    the Accounts with expired password

     set

     set.

    
    Image Removed

11. In

    the 

    the Python Config

     section

     section of the form, verify that the paths are correct. These values are pulled from the workflow parameters set on the workflow. If they are incorrect, change them accordingly.

    
    Image Removed

12. When you are ready to run the campaign,

    click 

    click Submit.

    
    Image Removed
    Once the run completes, then next step is to analyze the run results.

...

Next Steps

Analyze run results

Publish candidate roles