Business Role and Location Membership Type Recertification Policy

The business role and location membership recertification process validates whether the membership of a business role and location is still required for a valid business purpose. Certain actions must be made if the membership is no longer required. In other words, the business role and location membership recertification policy is to certify whether membership should exist or not.

For the recertification, a recertification policy is created, a recertification audit is created, the recertification policy is added to the audit, then the audit is compiled, which generates business requests that are sent for approval.

The engine bundles the recertification items into business requests based on the object itself. Therefore in this case the business role and location is the bundle for the business requests and its members are items.

The possible decisions for the business requests are generally set to certify or revoke the business role and location membership. However, these decisions are configurable. This configuration is described under decision configuration at the end of this page.

In this post, we will create a business role and location membership type recertification policy and add a target to it.

Note: For the recertification to work in EmpowerID, certain prerequisites must exist.

Create a Business Role and Location Membership type Recertification Policy

1. Log in to the EmpowerID Web application as an auditor or other person with the ability to configure audits.

2. On the navbar, expand Compliance and select Recertification.

3. On the Recertification page, select the Recertification Policies tab.
   
   

   Open

   

    

4. Then click + icon to create a new recertification policy

5. The policy details page opens up.

6. Select policy type as ‘Business Role and Location Membership.’ Enter any name, display name, and description.
   
   

   Open

   

    

7. Click on Save.

8. Attestation policy/Recertification policy is saved successfully.
   
   Add the target type “Business Role and Location” to the policy created

9. Click on the '+' icon at the bottom of the policy details page to add the target

10. The attestation policy target section opens up.

11. Under the type dropdown, select ‘Business Role and Location.’

12. Under the business role dropdown, search for a business role and select it.

13. Under the location dropdown, search for a location and select it.

14. Click on Save.
    
    

    
    Add the target type “Set Group” to the policy created

15. Click on the '+' icon at the bottom of the policy details page to add the target.

16. The attestation policy target section opens up.

17. Under the type dropdown, select ‘Set Group.’

18. Type a query name under “enter a query-based collection name”.

19. Click on Save.
    
    

     

20. The business role and location membership policy type with two target types are created.
    
    

Decision Configuration

The possible decisions for business role and location membership recertification policy type are configurable. For configuring them we need to take the following steps.

1. Log in to the EmpowerID web application

2. On the navbar, expand IT Shop and select Approval Flow Policies.

3. On the Approval Flow Policies page, select the Item Type Actions tab.

4. Then search for Recertify Person as Management Role Member.

5. Click on the Recertify Group as Business Role and Location Member and scroll down to select Decisions for Approval Flow Steps.
   
   

    

6. Click on the + icon to add more approval decision if needed.

7. As shown in the above screenshot, what happens when the approval decision is taken as
   Certify - Add Groups To Location work flow is started. Note that this is configurable.
   Revoke - Edit Reject Email From fulfillment work flow is started. Note that this is configurable.
   
   

8. You can also edit or change the workflows that should execute as per an approval decision. Just click on the edit icon on the above image.
   
   

    

9. To see how the business requests generated are grouped for approval, we need to open the approval step selected by right click and open in new window. Here the approval step is owner approval as shown in the image above. In this case it is bundled as per two rule type (resource owner) as shown in the image below. Therefore, based on what is configured in approval step the business requests generated will be routed to for approval.
   
   

    

10. Workflow used: When you edit the Item Type Actions named Recertify Group as Business Role and Location Member, you would be able to see the fulfillment workflow. For this policy type the fulfillment workflow is selected is Group Membership fulfillment as shown in the image below. For the fulfillment the selected workflow is run. This workflow assignment is configurable as well. You can delete it and select another workflow if needed.
    
    

    
    We have created the business role and location membership policy and added target to it. the next step would be to creat an audit and add the business role and location policy to it.

Next Steps

• Audit with Business Role and Location Membership Recertification Policy