Recertification targets will enable you to scope the recertification policy to the specific IT objects you want to audit. Adding Simply stating, adding Target(s) will configure who/what to recertify in an audit to which the policy is added. Once you create a recertification policy, you scope the policy by adding targets, such as a specific business role, location, or group. After we create the policy, a target grid appears on the policy details page. This grid allows you to add and remove recertification targets to and from the policy. Multiple EmpowerID actor types can include people, roles, locations, groups, and query-based collections.
Let us consider we have a recertification policy created as below, and now we need to add targets.
...
Add the target type “Location” to a policy created
...
Click on the '+' icon at the bottom of the policy details page to add the target.
...
The attestation policy target section opens up.
...
Under the type dropdown, select ‘Location.’
...
Under the select a location dropdown, search for a location and select it.
Click on Save.
...
Click on the '+' icon at the bottom of the policy details page to add the target.
...
The attestation policy target section opens up.
...
Under the type dropdown, select ‘Set Group.’
...
Type a query name under “enter a query-based collection name.”
...
Click on Save.
...
...
The account validity policy type with two target types are created.
...
group, query-based collections, and person.
| Tip |
|---|
Key Information The recertification policy can target different objects, such as Groups, Locations, Management Roles, etc. This allows for a flexible and granular approach to recertification, as different objects may have different recertification requirements. Additionally, the recertification policy can be configured to target multiple objects of the same type. For example, various groups can be targeted by the same recertification policy, allowing for a consistent recertification process across various groups. |
How to add Targets
Once you have created a recertification policy, you will be automatically navigated to view one page of the recertification policy with the Targets of the Recertification Scope tab. This tab allows you to add and remove the targets for the recertification policy. Please skip step 1 and 2, which provides instructions to open view one page if you already have it open.
Navigate to Compliance → Recertification and select the Recertification Policies tab.
To find the Recertification Policy, you can type the name in the search textbox and click on the search button to search.
Click on the link provided in the Display Name column to open the View One page.
Scroll to the bottom of the page, locate the Targets of the Recertification tab, and click on the ➕ Add button to add a new Target.
Select the appropriate Attestation Policy Target type, which will provide further options to configure or scope the recertification policy.
Insert excerpt IL:RecertComponents IL:RecertComponents name RecertA nopanel true 
You can follow the same instruction to add multiple targets. A recertification policy can have multiple target types and multiple objects of the same type. For example, in the image below, the recertification policy has three targets, two groups, and one management role.
Next Steps
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
...