Performing Revokes Quality Checks

Once recertification tasks have been completed by line managers, as the auditor you need to review and approve or reject any revokes executed by those line managers. In EmpowerID, this action is known as Revokes Quality Checks. Once you approve the revokes, if the resources represented by those revokes live in a system to which EmpowerID is connected, EmpowerID completes the revocation by removing those resources. If the resources live in a system to which EmpowerID is not connected, EmpowerID routes the revokes to the Fulfillment teams responsible for maintaining access to the resources in those disconnected systems.

To perform a Revokes Quality Check

  1. Log in to the EmpowerID Web application as the auditor responsible for performing Revoke Quality Checks.

  2. From the Navigation Sidebar, expand For Auditors and click Revokes Quality Check.

    All revokes executed by each line manager involved with the recertification are listed.

  3. Optionally, if you want to view more information about a revoke, click the Task ID link for for it.

    This directs you to the Recertification Details page, where you can view all the recertification decisions made by the line manager for the person. When you have finished viewing the details, click the back button on your browser to return to the Revokes Quality Checks page.

  4. From the Revokes Quality Check page, choose whether to process the revokes or ignore them. When doing so, you have two options:

    • You can select all revokes on the current page by checking the box in the grid header.

    • You can select individual revokes by checking the box beside the revoke. This is most useful in scenarios where you either want to further review the revokes before processing them or ignore them altogether.

  5. Once you have finished your selections, either click Process Selected to send the revokes to your Fulfillment teams or click Ignore Selected to close the revokes.

EmpowerID creates Fulfillment tasks for each Fulfillment team responsible for removing the access assignments in the external applications they own. The Fulfillment process is discussed further in the Fulfilling Revokes topic.