Create Campaign Runs
Create a campaign run
On the navbar, expand Role Management and click Role Mining.
On the Role Mining page, select the Campaigns tab and search for the campaign you want to configure.
From the grid, click the Campaign Name link for the campaign.
On the Role Mining Campaign Details page that appears, select the Runs tab and then click the Add button on the grid.
This opens the Role Mining Parameters form for the campaign.In the Role Mining Parameters section of the form do the following:
Select whether you want User Similarity to be included in the run. User Similarity is an optional calculation that is useful to see what percentage of the entitlements users share.
Select a scoring method from the Scoring Method drop-down. When selecting a scoring method, you have the following options:
perms+users – Includes both permissions and users in the candidate roles output by the run
perms – Includes just permissions in the candidate roles output by the run
users – Includes just users in the candidate roles output by the run
Review the attributes in the Attributes grid. You can add new attributes to the run or remove existing attributes. You can also edit the weight associated with each, by clicking the Edit button for the attribute. Lower numbers have greater weight.
In the Entitlement section of the form, enter the following information:
Max Entitlements in Role – Specify the maximum number of entitlements you want to be included in the candidate roles produced by the run.
Max Users in Role – Specify the maximum number of users you want to be included in the candidate roles produced by the run.
Max Roles – Specify the maximum number of candidate roles you want to be produced by the run.
Min Entitlements in Role – Specify then minimum number of entitlements you want to be included in the candidate roles produced by the run.
Min Users in Role – Specify then minimum number of users you want to be included in the candidate roles produced by the run.
Entitlement Weight – Specify the weight for the entitlements. The lower the number, the greater the weight.
In the Attribute section of the form, enter the following information:
Attribute Weight – Specify the attribute weight. The lower the number the greater the weight.
Max Attributes in Role – Specify then maximum number of attributes you want to be included in the candidate roles produced by the run.
Optionally, in the Excluded Entitlement Queries section search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude accounts with expired passwords from the run, you select the Accounts with expired password set.
Optionally, in the Excluded Person Queries section search for and add exclusion sets to the run. Sets are queries of the EmpowerID Identity Warehouse that return dynamic resources, so selecting a set here excludes the objects returned by the set from the run. For example, if you want to exclude people who have accounts with expired passwords from the run, you select the Accounts with expired password set.
When you are ready to run the campaign, click Submit.
