Page Comparison

...

Create a campaign run

1. From the Navigation Sidebar of the EmpowerID Web interface, expand Role Mining and click Role Mining Campaign.
2. From

   On the navbar, expand Role Management and click Role Mining.

3. On the Role Mining

   Campaign

   page,

   click the Campaigns tab

   select the Campaigns tab and search for the campaign you want to configure.

4. From the grid, click

   the 

   the Campaign Name

    link

    link for the campaign.
   

   Image Removed
   From the Image Added

5. On the Role Mining Campaign Details

    page for the campaign

    page that appears,

   click the 

   select the Runs tab and then click

   the 

   the Add

    button

    button on the grid.

   
   Image Removed
   In the 

   
   

   Image Added

   
   This opens the Role Mining Parameters form for the campaign.
   

   Image Added

6. In the Role Mining Parameters

    section

    section of the form do the following:

   • Select whether you

   want 

   • want User Similarity

    to

   •  to be included in the run. User Similarity is an optional calculation that is useful to see what percentage of the entitlements users share.

   • Select a scoring method from

   the 

   • the Scoring Method

    drop

   •  drop-down. When selecting a scoring method, you have the following options:

     • perms+users

    -

   • •  – Includes both permissions and users in the candidate roles output by the run

     • perms

    -

   • •  – Includes just permissions in the candidate roles output by the run

     • users

    -

   • •  – Includes just users in the candidate roles output by the run

   • Review the attributes in

   the 

   • the Attributes

    grid

   •  grid. You can add new attributes to the run or remove existing attributes. You can also edit the weight associated with each, by clicking the Edit button for the attribute. Lower numbers have greater weight.

   
   Image Removed

7. In

   the 

   the Entitlement

    section

    section of the form

   do

   , enter the following information:

   In the 

   • Max Entitlements in Role

    field, specify

   • – Specify the maximum number of entitlements you want to be included in the candidate roles produced by the run.

   In the 

   • Max Users in Role

    field, specify

   •  – Specify the maximum number of users you want to be included in the candidate roles produced by the run.

   In the 

   • Max Roles

    field, specify

   • – Specify the maximum number of candidate roles you want to be produced by the run.

   In the 

   • Min Entitlements in Role

    field, specify

   • – Specify then minimum number of entitlements you want to be included in the candidate roles produced by the run.

   In the 

   • Min Users in Role

    field, specify

   •  – Specify then minimum number of users you want to be included in the candidate roles produced by the run.

   In the 

   • Entitlement Weight

    field, specify

   •  – Specify the weight for the entitlements. The lower the number, the greater the weight.

   
   When you have completed the above, the Entitlement section of the form should look similar to the below image.
   Image Removed
   In the Attribute section

8. In the Attribute section of the form

   do

   , enter the following information:

   • Attribute Weight – Specify the attribute weight

   by entering that number in the Attribute Weight field

   • . The lower the number the greater the weight.

   • Max Attributes in Role – Specify then maximum number of attributes you want to be included in the candidate roles produced by the run

   by entering that number in the Max Attributes in Role field

   • .

9. Optionally, in

   the 

   the Excluded Entitlement Queries

    section

    section search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude accounts with expired passwords from the run, you select

   the 

   the Accounts with expired password

    set

    set.

   Image Removed
   

10. Optionally, in

    the 

    the Excluded

    People

    Person Queries

     section

     section search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude people who have accounts with expired passwords from the run, you select

    the 

    the Accounts with expired password

     set.
    Image Removed
    In the Python Config section of the form, verify that the paths are correct. These values are pulled from the workflow parameters set on the workflow. If they are incorrect, change them accordingly.
    Image Removed

     set.

11. When you are ready to run the campaign,

    click 

    click Submit.

    Image Removed
    
12. Once the run completes, then next step is to analyze the run results.

...

...

...

...

Next Steps

Analyze run results

Publish candidate roles