Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Access recertification, also known as attestation, is a process that helps organizations ensure that users have the appropriate level of access to the resources. At any point, the users should have only enough access needed to do their jobs, and the access complies with the company's policies and regulations. The process typically involves reviewing user access rights, such as permissions to access sensitive data or systems, and comparing them to the users' job responsibilities and roles within the organization. The final goal of the process is to find any discrepancies to investigate and address.

Managing user access and maintaining compliance is getting complex, with organizations having more systems and applications. EmpowerID allows you to manage your access certification and governance, EmpowerID provides a comprehensive solution for access certification and governance, enabling organizations to audit user access to critical systems, recertify discrepancies, and provide revoke access revocation. With the help of the EmpowerID's Recertification features provided by EmpowerID, you can define and automate the process of collecting data for recertifying user access and presenting present it to auditors regularly.

You can create recertification policies in EmpowerId that outline which users and what access rights will be reviewed. Once the policies are established, you can add these policies in multiple audits enabling you to granularly configure to collect different types of data in a single audit. EmpowerID uses a task-based approach for Recertification, which creates business requests for each access policy to be rectified based on the recertification policy. These requests are notified and presented to auditors, who can recertify access by providing a decision in a task window. 

Note

There are prerequisites for the Recertification to work. Please ensure that the following jobs are enabled and running.

  • Attestation Policy Compiler Job

  • Business Request Fulfillment Job

Caelor cards macro v2
summary
titlectdue81xsu
content{"cards":[{"id":"107","title":"Overview of Recertification","icon":"font-awesome/BookOpen","color":{"san_francisco":{"background":"#ffffff1f","color":"#0099ff"},"austin":{"background":"#0099ff","color":"#000000"},"mumbai":{"background":"#0099ff"},"hong_kong":{"background":"#0099ff"},"cape_town":{"background":"#0099ff"},"palo_alto":{"color":"#0099ff"},"new_york":{"color":"#0099ff"},"madrid":{"color":"#0099ff"},"berlin":{"color":"#0099ff"},"la_paz":{"color":"#0099ff"},"sydney":{"color":"#0099ff"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"2984894338","link":"https://dotnetworkflow.jira.com/wiki/x/gt-psQ","title":"Recertification Overview","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25,"tabId":"edkl2b"},{"id":"u4yvjo","title":"Recertification Policy Types","icon":"atlaskit/EditorBulletListIcon","color":{"san_francisco":{"background":"#ffffff1f","color":"#6083ff"},"austin":{"background":"#6083ff","color":"#000000"},"mumbai":{"background":"#6083ff"},"hong_kong":{"background":"#6083ff"},"cape_town":{"background":"#6083ff"},"palo_alto":{"color":"#6083ff"},"new_york":{"color":"#6083ff"},"madrid":{"color":"#6083ff"},"berlin":{"color":"#6083ff"},"la_paz":{"color":"#6083ff"},"sydney":{"color":"#6083ff"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"2984894410","link":"/pages/2984894410/Recertification+Policy+Typeshttps://dotnetworkflow.jira.com/wiki/x/yt-psQ","title":"Recertification Policy Types","type":"page","source":"directpage"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25,"tabId":"edkl2b"},{"id":"o9fube0mfhn","title":"Recertification PrerequisitesHow-To","icon":"materialfont-designawesome/BuildLaptopCode","color":{"san_francisco":{"background":"#ffffff1f","color":"#ae84ff#e677fb"},"austin":{"background":"#ae84ff#e677fb","color":"#000000"},"mumbai":{"background":"#ae84ff#e677fb"},"hong_kong":{"background":"#ae84ff#e677fb"},"cape_town":{"background":"#ae84ff#e677fb"},"palo_alto":{"color":"#ae84ff#e677fb"},"new_york":{"color":"#ae84ff#e677fb"},"madrid":{"color":"#ae84ff#e677fb"},"berlin":{"color":"#ae84ff#e677fb"},"la_paz":{"color":"#ae84ff#e677fb"},"sydney":{"color":"#ae84ff#e677fb"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"28090304332984894472","link":"https://dotnetworkflow.jira.com/wiki/x/IWdupwCODpsQ","title":"Pre-requisite for RecertificationRecertification How-To","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25,"tabId":"edkl2b"},{"id":"e0mfhn1cy28","title":"Recertification How-ToConfigure Custom Decision For Business Request","icon":"font-awesome/LaptopCode","color":{"san_francisco":{"background":"#ffffff1f","color":"#e677fb"},"austin":{"background":"#e677fb","color":"#000000"},"mumbai":{"background":"#e677fb"},"hong_kong":{"background":"#e677fb"},"cape_town":{"background":"#e677fb"},"palo_alto":{"color":"#e677fb"},"new_york":{"color":"#e677fb"},"madrid":{"color":"#e677fb"},"berlin":{"color":"#e677fb"},"la_paz":{"color":"#e677fb"},"sydney":{"color":"#e677fb"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"28090305662984895331","link":"https://dotnetworkflow.jira.com/wiki/x/pmdupwY_PpsQ","title":"Recertification How-ToConfigure Custom Decision for Business Requests","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25,"tabId":"edkl2b"},{"id":"1cy289tx4ep","title":"Configure Custom Decision For Business RequestApproval & Rejection Fullfillment Workflow\n","icon":"font-awesome/LaptopCode","color":{"san_francisco":{"background":"#ffffff1f","color":"#e677fb"},"austin":{"background":"#e677fb","color":"#000000"},"mumbai":{"background":"#e677fb"},"hong_kong":{"background":"#e677fb"},"cape_town":{"background":"#e677fb"},"palo_alto":{"color":"#e677fb"},"new_york":{"color":"#e677fb"},"madrid":{"color":"#e677fb"},"berlin":{"color":"#e677fb"},"la_paz":{"color":"#e677fb"},"sydney":{"color":"#e677fb"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"29556082102985820191","link":"https://dotnetworkflow.jira.com/wiki/x/kgArsHwD4sQ","title":"Closure of AuditApproval & Rejection Fullfillment Workflow","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25,"tabId":"edkl2b"},{"id":"9tx4ep92ipzu","title":"Closure of AuditContinuous Group Membership Change Recertifications\n","icon":"font-awesome/LaptopCode","color":{"san_francisco":{"background":"#ffffff1f","color":"#e677fb"},"austin":{"background":"#e677fb","color":"#000000"},"mumbai":{"background":"#e677fb"},"hong_kong":{"background":"#e677fb"},"cape_town":{"background":"#e677fb"},"palo_alto":{"color":"#e677fb"},"new_york":{"color":"#e677fb"},"madrid":{"color":"#e677fb"},"berlin":{"color":"#e677fb"},"la_paz":{"color":"#e677fb"},"sydney":{"color":"#e677fb"},"tokyo":{"background":"#ffffff1f","color":"#0052ccff"}},"iconType":"icon","newTab":"false","link":{"id":"29556082102984895524","link":"https://dotnetworkflow.jira.com/wiki/x/kgArsJOTpsQ","title":"Closure of AuditContinuous Group Membership Change Recertifications","type":"page","source":"page"},"overlay":{"isActive":true,"color":"#000","opacity":0.3},"borderRadius":12,"gap":25,"tabId":"edkl2b"}],"config":{"borderRadius":9,"gap":15,"type":"text","columns":4,"layout":[],"design":"tokyo","textAlign":"left","height":180,"iconRadius":50,"iconSize":100},"tabs":[{"id":"edkl2b","text":"Type text here","icon":"bootstrap/CloudsFill"}]}

...