Page Comparison

Account validity recertification is a method of determining whether or not accounts are still required. Certain actions must be made if the accounts are no longer required. In other words, account validity recertification policy is to certify whether an account should exist or not. For example, in a company there may be access recertification of employees every year. For the recertification, an audit is created

For the recertification, a recertification policy is created, a recertification audit is created, the recertification policy is added to the audit, then audit is compiled, which generates business requests that are sent for approval. The

In case of account validity recertification, the recertification engine bundles the recertification items into business requests as per the responsible party assigned. If the For any item being recertified where its responsible party is null for any item being recertified, the engine , it bundles them all into one business request where as per the fall-back assigneeis used in place of responsible party.Recertification policies are policies that you add to audits to generate recertification review tasks for the access assignments given to people, roles, groups, and query-based collections. Possible decisions for account validity recertification .

The possible decisions for the business requests are generally set as certify, disable , or delete etc. However, these possible decisions are configurable. These configuration is described under decision configuration at the end of this page.

In this post, we will create account validity type recertification policy and add a target to it.

Pre-requisite for recertification policies, audit compilation and fulfilment of business requestsNote: For the recertification to work in EmpowerID, certain prerequisites must exist.

Create a Account Validity Type Recertification Policy

...

Decision Configuration

The possible decisions (certify, disable and delete) for account validity recertification policy type are configurable. For configuring them we need to take the following steps.

Log in to the EmpowerID web application
On the navbar, expand IT Shop and select Approval Flow Policies.
On the Approval Flow Policies page, select the Item Type Actions tab.
Then search for Recertify Account Validity.
Click on the Recertify Account Validity and scroll down to select Decisions for Approval Flow Steps.
Click on the + icon to add more approval decision if needed.
As shown in the above screenshot, what happens when the approval decision is taken as
Certify - no fulfillment work flow is needed.
Delete - Recert delete account fulfillment work flow is started.
Disable - Recert disable account fulfillment work flow is started.
You can also edit or change the workflows that should execute as per an approval decision. Just click on the edit icon on the above image.
Account validity is grouped by account manager if the approval step is selected as account manager, as shown in above image. To see how it is grouped the business requests generated are grouped for approval, we need to open the account manager approval step in its view one page selected by right click and open in new window. Here the approval step is account manager as shown in the image above. In this case it is bundled as per two rule types ( resource owner and target resource line manager) as shown in the image below. So based on what is configured in approval step the business requests generated will be routed to for approval. For example, here resource owner means owner of the account.
Workflow used: When you edit the Item Type Actions named Recertify Account Validity, you would be able to see the fulfillment workflow. For this policy type item the fulfillment workflow selected is Account Recet Ful as shown in the image below.
Image Removed
For the fulfillment the selected workflow is run. This workflow assignment is configurable as well. You can delete it and select another workflow if needed.
Image Added

We have created the account validity recertification policy and added target to it. the next step would be to creat an audit and add the account validity policy to it.