In EmpowerID, an audit is a logically named user-defined object for identifying or grouping recertification tasks and running the recertification policies that generate them. After creating an audit, you can add one or more recertification policies to it. When the audit runs, it creates a recertification task for each item in the policy. Group membership recertification policy is used to certify group membership, including user and nested groups. We will create an audit and add a group membership type recertification policy.
Pre-requisite for recertification policies, audit compilation and fulfilment of business requests.
To create an audit
On the navbar, expand Compliance and select Recertification.
Select the Audits tab on the Recertification page and click + icon to Create Audit.
Enter the name, display name, and description.
Select location from the location tree.
Select the audit owner
Select the started date and due date
Click on the Save button.
Click on the '+' icon to add the recertification policy on the audit details page.
Select the recertification policy from the recertification dropdown.
Select the fall-back assignee and click on Save.
Click on the 'Enable' checkbox for the audit and click on the Save button.
Please navigate to my audits tab and search for the above audit.
The audit is displayed in the list.
Compilation status shows as compilation completed. Business Request = No of the Group in the recertification policy.
Validate that these Business Requests are visible in MyTasksLogin to MyTasks (Tasks and Requests -->My Task App)
In the top left, filter by 'To Do.'
Search by the Audit Name.
Validate that any potential approvers of the business request an action.Login to MyTasks -> In the top left, filter by 'To Do' -> Search by the Audit Name.
Click on the Business Request.
Validate that fulfilment runs successfully for the business requestsClick on the link below the name of the business request in the above image.
It will open a pop-up window.
Verify that the Fulfilment status is “Fulfilment Succeeded.”
Note: You can also check the fulfillment status of a business request under Request Item Tracking.In EmpowerID, Navigate to Identity Administration -> Groups -> Search for the group that is configured on the recertification policy.
Click on the group and navigate to View One page of the group
If group membership is approved -> then the membership of the user should still exist.
If group membership is revoked -> then the membership of the user should not exist anymore
Related