The review of user access rights to see if they are proper and correspond to the organization's internal rules and compliance standards is known as access recertification audit.
An audit can be considered as a project with an start date and end date. We might want to audit or certify multiple items using an audit. For example, in a Q1 audit you might want to certify, external partner identify as well as member of certain high risk management roles. These items are specified in one or more recertification policies. As a project might have multiple deliverables an audit can have multiple recertification policies associated with it. We can create recertification policies of different types in the EmpowerID system and these policies are reusable.
Account validity recertification policy is to certify whether an account should exist or not. For the recertification, an audit is created, which generates business requests that are sent for approval. The engine bundles the recertification items into business requests as per the responsible party. For any item being recertified where its responsible party is null, it bundles them all into one business request where the subject of the request is the fall-back assignee.In EmpowerID, an audit is a logically named user-defined object for identifying or grouping recertification tasks and running the recertification policies that generate them. After creating an audit, you can add one or more recertification policies to it. When the audit runs, it creates a recertification task for each item in the policy. Account is a method of determining whether or not accounts are still required. Certain actions must be made if the accounts are no longer required. In other words, account validity recertification policy is to certify whether an account should exist or not. Possible decisions are: certify, disable and delete. We will create an audit and add a account validity type recertification policy.
Pre-requisite for recertification policies, audit compilation and fulfilment of business requests.
...