...
Each Recertification policy is targeted or scoped to apply only to specific people, roles, or resources using EmpowerID Query-Based Collections (SetGroups). These are comprised of Sets, which are LDAP SQL queries primarily or code-based queries in some cases. These Sets are re-evaluated by the EmpowerID engine on a scheduled basis and can group collections of people. They can be based on questions written against the EmpowerID Identity Warehouse or external systems in a customer's environment. Query-Based Collections for Recertification policies provide a rich and flexible access review mechanism. Organizations can selectively collect the objects they want to incorporate within a given policy and then schedule that policy to create review tasks that best meet the organization's security requirements. For example, with SetGroups, you could create one Recertification Policy that targets high-security groups only, scheduling that policy to run more frequently, and create another Recertification Policy for lower security groups with a less frequent run schedule.
...