Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Access This section introduces access recertification, also known as attestation, is a process that helps organizations ensure that for ensuring users have the appropriate level of access to the resources. At any point, the users should have only enough access needed to do their jobs, and the access complies with the company's resources in compliance with organizational policies and regulations. The process typically involves reviewing user access rights, such as permissions to access sensitive data or systems, and comparing them to the users' job responsibilities and roles within the organization. The final goal of the process is to find any discrepancies to investigate and address.

Managing user access and maintaining compliance is getting complex, with organizations having more systems and applications. EmpowerID allows you to manage your access certification and governance, audit user access to critical systems, recertify discrepancies and provide access revocation. With the help of the Recertification features provided by EmpowerID, you can define and automate the process of collecting data for recertifying user access and presenting it to auditors regularly.

You can create recertification policies in EmpowerId that outline which users and what access rights will be reviewed. Once the policies are established, you can add these policies in multiple audits enabling you to granularly configure to collect different types of data in a single audit. EmpowerID uses a task-based approach for Recertification, which creates business requests for each access policy to be rectified based on the recertification policy. These requests are notified and presented to auditors, who can recertify access by providing a decision in a task window. 

Note

There are prerequisites for the Recertification to work. Please ensure that the following jobs are enabled and running.

  • Attestation Policy Compiler Job

  • Business Request Fulfillment Job

Caelor cards macro v2summarytitletyixs9content{"cards":[{"id":"djovqo","tabId":"svgdhb","title":"Overview of Recertification","text":"Type text here","label":"CARD LABEL","button":"View more","quote":"Design is not just what it looks like and feels like. Design is how it works.","author":"Steve Jobs","icon":"bootstrap/CloudsFill","color":{"san_francisco":{"background":"#ffffff1f","color":"#0099ff"},"austin":{"background":"#0099ff","color":"#000000"},"mumbai":{"background":"#0099ff"},"hong_kong":{"background":"#0099ff"},"cape_town":{"background":"#0099ff"},"palo_alto":{"color":"#0099ff"},"new_york":{"color":"#0099ff"},"madrid":{"color":"#0099ff"},"berlin":{"color":"#0099ff"},"la_paz":{"color":"#0099ff"},"sydney":{"color":"#0099ff"},"tokyo":{"color":"#0099ff"}},"image":{"link":"https://images.unsplash.com/photo-1612914380234-b35087733c4e?ixlib=rb-1.2.1&ixid=MnwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8&auto=format&fit=crop&w=687&q=80","imageUrl":"https://images.unsplash.com/photo-1612914380234-b35087733c4e?ixlib=rb-1.2.1&ixid=MnwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8&auto=format&fit=crop&w=687&q=80"},"newTab":"false","link":{"id":"2995945688","link":"https://dotnetworkflow.jira.com/wiki/x/2ICSsg","title":"Recertification Overview","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3}},{"id":"uqdi6i","tabId":"svgdhb","title":"Recertification Policy Types","text":"Type text here","label":"CARD LABEL","button":"View more","quote":"Design is not just what it looks like and feels like. Design is how it works.","author":"Steve Jobs","icon":"bootstrap/CloudsFill","color":{"san_francisco":{"background":"#ffffff1f","color":"#6083ff"},"austin":{"background":"#6083ff","color":"#000000"},"mumbai":{"background":"#6083ff"},"hong_kong":{"background":"#6083ff"},"cape_town":{"background":"#6083ff"},"palo_alto":{"color":"#6083ff"},"new_york":{"color":"#6083ff"},"madrid":{"color":"#6083ff"},"berlin":{"color":"#6083ff"},"la_paz":{"color":"#6083ff"},"sydney":{"color":"#6083ff"},"tokyo":{"color":"#6083ff"}},"image":{"link":"https://images.unsplash.com/photo-1494500764479-0c8f2919a3d8?ixlib=rb-1.2.1&ixid=MnwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8&auto=format&fit=crop&w=687&q=80","imageUrl":"https://images.unsplash.com/photo-1494500764479-0c8f2919a3d8?ixlib=rb-1.2.1&ixid=MnwxMjA3fDB8MHxwaG90by1wYWdlfHx8fGVufDB8fHx8&auto=format&fit=crop&w=687&q=80"},"newTab":"false","link":{"id":"3017113641","link":EmpowerID simplifies this process by enabling you to define recertification policies, automate audits, and manage user access efficiently. With EmpowerID's task-based approach, you can review and approve or revoke access rights based on predefined policies, ensuring consistent compliance and governance. The following articles provide step-by-step instructions for using EmpowerID's recertification features.

Easy html macro
theme{"label":"solarized_dark","value":"solarized_dark"}
contentByMode{"html":"<!doctype html>\r\n<meta http-equiv=\"Content-Security-Policy\" content=\"default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' blob:; style-src 'self'; frame-src 'self'\">\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/bootstrap-icons.css\" rel=\"stylesheet\" type=\"text/css\" />\r\n<script src=\"https://kit.fontawesome.com/59759af5bf.js\" crossorigin=\"anonymous\"></script>\r\n<link href=\"https://fonts.googleapis.com/css?family=Lato:300,400,700,300italic,400italic,700italic\" rel=\"stylesheet\" type=\"text/css\" />\r\n<link href=\"https://docs.empowerid.com/new_docs.css\" rel=\"stylesheet\">\r\n<link href=\"https://docs.empowerid.com/assets/css/aguidehp22.css\" rel=\"stylesheet\">\r\n\r\n<meta charset=\"utf-8\" />\r\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1, shrink-to-fit=no, overflow-y=scroll\" />\r\n<style>\r\nbody{\r\n overflow-y: hidden;\r\n}\r\n a{color: #212529;\r\n text-decoration:none;\r\n }\r\n a:hover{\r\n color: #212529;\r\n }\r\n header.masthead{\r\n margin-top:20px;\r\n }\r\n \r\n #mainNav{\r\n margin-top: 20px;\r\n }\r\n .card {\r\n border-left: 4px solid #3085c9;\r\n height: 120%;\r\n }\r\n .card:hover{\r\n border-left: 4px solid #00b2ca;\r\n box-shadow: 0 0 10px 0 rgba(100, 100, 100, 0.26);\r\n }\r\n .card-title{\r\n padding-top: 20px;\r\n }\r\n .row-gap{\r\n padding: 1rem;\r\n }\r\n .first-row{\r\n padding-top: 1rem;\r\n }\r\n hr {\r\n border: none;\r\n border-top: 3px double #333;\r\n color: #333;\r\n overflow: visible;\r\n text-align: center;\r\n height: 5px;\r\n margin: 5%\r\n \r\n}\r\n\r\nhr:after {\r\n background: #fff;\r\n content: '§';\r\n padding: 0 4px;\r\n position: relative;\r\n top: -13px;\r\n}\r\n\r\n</style>\r\n<body id=\"page-top\">\r\n<div class=\"container-fluid\">\r\n <!-- Row 1 -->\r\n <div class=\"row d-flex align-items-stretch first-row\">\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EUGV24R2/pages/3615857640/Create+Recertification+Policy\">\r\n <div class=\"card d-flex align-items-center\" >\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">Create Recertification Policies</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EUGV24R2/pages/3615857708/Add+Target+to+Recertification+policy\">\r\n <div class=\"card d-flex align-items-center\">\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">Add Targets to Policies</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki

...

/spaces/EUGV24R2/pages/3615857761/Add+Item+Type+Scope+Data+to+Recertification+Policy\">\r\n <div class=\"card d-flex align-items-center\">\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">Add Item Type Scopes</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EUGV24R2/pages/3615857816/Create+Recertification+Audit\">\r\n <div class=\"card d-flex align-items-center\">\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">Create Recertification Audits</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n </div>\r\n \r\n <!--Row 2 -->\r\n <div class=\"row d-flex align-items-stretch\">\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EUGV24R2/pages/3615857867/Add+Recertification+Policies+to+Audit\">\r\n <div class=\"card d-flex align-items-center\">\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">Add Recertification Policies to Audits</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EUGV24R2/pages/3615858065/Verify+Business+Requests+are+Generateds\">\r\n <div class=\"card d-flex align-items-center\">\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">Verify Business Requests are Generated</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EUGV24R2/pages/3615858116/View+Audit+Recertification+information\">\r\n <div class=\"card d-flex align-items-center\">\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">View Audit And Recertification Information</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n <div class=\"col-sm-12 col-md-6 col-lg-3 row-gap\">\r\n <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EUGV24R2/pages/3615858193/Responding+to+Recertification+Requests\">\r\n <div class=\"card d-flex align-items-center\">\r\n <div class=\"card-body text-center\">\r\n <h4 class=\"card-title\">Responding to Recertification Requests</h4>\r\n </div>\r\n </div>\r\n </a>\r\n </div>\r\n </div>\r\n \r\n \r\n</div>\r\n\r\n</section>\r\n\r\n <!-- Footer-->\r\n <footer class=\"footer py-4\">\r\n <div class=\"container\">\r\n <!--<div class=\"row align-items-center\">\r\n <div class=\"col-lg-4 \">Copyright &copy; EmpowerID 2023</div>\r\n <div class=\"col-lg-4 my-3 my-lg-0\">\r\n <a class=\"btn btn-dark btn-social mx-2\" href=\"https://www.twitter.com/empowerid\" target=\"_self\" rel=\"noopener noreferrer\"><i class=\"fab fa-twitter\"></i></a>\r\n <a class=\"btn btn-dark btn-social mx-2\" href=\"https://www.facebook.com/EmpowerID/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\"><i class=\"fab fa-facebook-f\"></i></a>\r\n <a class=\"btn btn-dark btn-social mx-2\" href=\"https://www.linkedin.com/company/empowerid?trk=public_profile_topcard-current-company\" target=\"_blank\" rel=\"noopener noreferrer nofollow\"><i class=\"fab fa-linkedin-in\"></i></a>\r\n </div>\r\n </div>-->\r\n </div>\r\n </footer>\r\n \r\n\r\n<!-- Bootstrap core JS-->\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js\"></script>\r\n \r\n</body>","javascript":"window.addEventListener('DOMContentLoaded', event => {\r\n\r\n // Navbar shrink function\r\n var navbarShrink = function () {\r\n const navbarCollapsible = document.body.querySelector('#mainNav');\r\n if (!navbarCollapsible) {\r\n return;\r\n }\r\n if (window.scrollY === 0) {\r\n navbarCollapsible.classList.remove('navbar-shrink')\r\n } else {\r\n navbarCollapsible.classList.add('navbar-shrink')\r\n }\r\n\r\n };\r\n\r\n // Shrink the navbar \r\n navbarShrink();\r\n\r\n // Shrink the navbar when page is scrolled\r\n document.addEventListener('scroll', navbarShrink);\r\n\r\n // Activate Bootstrap scrollspy on the main nav element\r\n const mainNav = document.body.querySelector('#mainNav');\r\n if (mainNav) {\r\n new bootstrap.ScrollSpy(document.body, {\r\n target: '#mainNav',\r\n offset: 74,\r\n });\r\n };\r\n\r\n // Collapse responsive navbar when toggler is visible\r\n const navbarToggler = document.body.querySelector('.navbar-toggler');\r\n const responsiveNavItems = [].slice.call(\r\n document.querySelectorAll('#navbarResponsive .nav-link')\r\n );\r\n responsiveNavItems.map(function (responsiveNavItem) {\r\n responsiveNavItem.addEventListener('click', () => {\r\n if (window.getComputedStyle(navbarToggler).display !== 'none') {\r\n navbarToggler.click();\r\n }\r\n });\r\n });\r\n\r\n});\r\n","css":""}