In EmpowerID, an audit is a user-defined, logically named object for identifying or grouping recertification tasks and running the Recertification recertification policies that generate those tasks. After creating an audit, you add Recertification recertification policies to it to define what you want to audit. Then when the audit runs, it compiles those Recertification recertification policies, creating the appropriate any necessary recertification tasks.
| Info | ||
|---|---|---|
| ||
Before you can add a specific Recertification policy to an audit, both the audit and the policy must exist in EmpowerID. If they do not, please see Creating Recertification Policies and Creating and Configuring Audits for more information. |
...
On the navbar, expand Compliance and click Audit Configuration.
Click
...
the Audits
...
tab and search for the audit to which you want to add a Recertification policy.
Click the Audit link
...
for the audit.
On the Audit Details page that appears, expand the Recertification Policies accordion and then click
...
the Add button.
Search for and select the desired Recertification policy.
Optionally, enter a number in the Ignore Any Certified Within Last X Days field and click Save.
Repeat steps 5 and 6 for any other Recertification policies you want to add to the audit
...
.
...
...
| Tip |
|---|
...
Entering a number in the Ignore Any Certified |
...
within the Last X Days field |
...
is useful in situations where a previous audit closed before all recertification tasks it generated were completed. This way, managers only receive recertification tasks for any direct reports who were not certified in the last audit. This setting does not completely exclude previously audited direct reports; it only excludes those access assignments that were re-certified within the specified day range. Thus, if a direct report gains access to a new resource, such as becoming the member of a new group, the audit generates a recertification task for that new |
...
To add exclusions to the Policy
Optionally, you can keep the audit from creating recertification tasks for certain access assignments that would normally be generated by the recertification policy.
...
membership |
...
. |