From the Navigation Sidebar of the EmpowerID Web interface, expandRole Miningand clickRole Mining Campaign.
From the Role Mining Campaign page, click theCampaignstab and search for the campaign you want to configure.
From the grid, click theCampaign Namelink for the campaign.
From theRole Mining Campaign Detailspage for the campaign that appears, click theRuns tab and then click theAddbutton on the grid.
In theRole Mining Parameterssection of the form do the following:
Select whether you wantUser Similarityto be included in the run. User Similarity is an optional calculation that is useful to see what percentage of the entitlements users share.
Select a scoring method from theScoring Methoddrop-down. When selecting a scoring method, you have the following options:
perms+users- Includes both permissions and users in the candidate roles output by the run
perms- Includes just permissions in the candidate roles output by the run
users- Includes just users in the candidate roles output by the run
Review the attributes in theAttributesgrid. You can add new attributes to the run or remove existing attributes. You can also edit the weight associated with each, by clicking the Edit button for the attribute. Lower numbers have greater weight.
In theEntitlementsection of the form do the following:
In theMax Entitlements in Rolefield, specify the maximum number of entitlements you want to be included in the candidate roles produced by the run.
In theMax Users in Rolefield, specify the maximum number of users you want to be included in the candidate roles produced by the run.
In theMax Rolesfield, specify the maximum number of candidate roles you want to be produced by the run.
In theMin Entitlements in Rolefield, specify then minimum number of entitlements you want to be included in the candidate roles produced by the run.
In theMin Users in Rolefield, specify then minimum number of users you want to be included in the candidate roles produced by the run.
In theEntitlement Weightfield, specify the weight for the entitlements. The lower the number, the greater the weight.
When you have completed the above, the Entitlement section of the form should look similar to the below image.
In theAttributesection of the form do the following:
Specify the attribute weight by entering that number in theAttribute Weightfield. The lower the number the greater the weight.
Specify then maximum number of attributes you want to be included in the candidate roles produced by the run by entering that number in theMax Attributes in Rolefield.
Optionally, in theExcluded Entitlement Queriessection search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude accounts with expired passwords from the run, you select theAccounts with expired passwordset.
Optionally, in theExcluded People Queriessection search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude people who have accounts with expired passwords from the run, you select theAccounts with expired passwordset.
In thePython Configsection of the form, verify that the paths are correct. These values are pulled from the workflow parameters set on the workflow. If they are incorrect, change them accordingly.
When you are ready to run the campaign, clickSubmit.
Once the run completes, then next step is toanalyzethe run results.