Responding to Recertification Requests

The certification of access involves periodic review and approval of user or group access rights by an authorized individual. EmpowerID Audits create business requests or tasks for assigned auditors to certify or recertify access rights. These tasks are assigned according to recertification policies. The auditors assigned to the task can review the access rights and either approve or reject them based on the recertification policy. They also have the ability to disable or delete access if necessary.

View your Recertification Tasks

  1. Navigate to Business Requests & Tasks→ Business Request → My Tasks App. You will be redirected to the My Tasks Microservice.

  2. Select "My Requests" from the top dropdown menu to switch from the To-Do page to the My Requests page.

     

  3. You can filter the recertification requests using various criteria in the filter pane or search bar to refine them. The filter pane and search bar offer several common filtering and searching methods.

    • Select the Business Request Type as Recertification in the filter pane.

    • You can select the filter name in the Filter By Audit dropdown in the filter pane.

    • You can provide the name of the Audit in the Search box to search the Business Requests for the audit.



  4. Click on the Business Request details to open the details view. You can find detailed information about corresponding resources, access, and the audit in the details view.

    • The Title of the Business Request clearly displays information about recertification access, the requester, the recertification policy, audits, and other relevant details.

    • In the "To Do" tab, you can find all the items that need to be recertified as per the business request, along with relevant details such as current steps and resources.

    • The Requested Items section has tabs to classify the requested items or the access recertification request into All, Approved, Rejected, Open, and Fulfilled.

       

Make Recertification Decisions

Regarding recertification decisions, it's important to carefully review and assess requests to certify user access rights to maintain compliance and security. Authorized users have the ability to make decisions on business requests related to certification and access.

  1. In order to provide a decision, kindly open the details pane for the relevant business request. Please follow the instructions provided in the previous section to access the details pane.


  2. As a user, you can either make a single decision for all requested items for recertification of access or make individual decisions for each access request.

    1. To make a single decision for all access requests in a business request, click the Decisions dropdown button and select the appropriate option. This decision will be applied to all items in the request. For instance, if you choose to certify, all access listed as request items will be certified accordingly.

       

    2. In order to decide on a specific access or business request item, you can click on the Decision dropdown button and choose the appropriate decision. Please note that your decision will only apply to that particular access request.



      If you wish, you can leave a comment before clicking "submit" to finalize your decision.




  3. Once the decision is provided, please verify that the recertification item was fulfilled.

     

Collaboration & Delegation

EmpowerID's recertification feature facilitates collaborative efforts and task delegation. These features enhance efficiency and flexibility in managing recertification processes, promoting effective collaboration among auditors and stakeholders involved in maintaining access compliance. It offers several commonly used features like

  • Assign / Unassign a recertification request

  • Delegate the recertification task to another auditor

  • Add additional approvers for recertificating access

As you may know, the recertification engine generates business requests or tasks for auditors to certify or recertify access rights. The process for handling recertification tasks and other common business requests is similar. Therefore, please refer to this page below for instructions on collaborating and delegating tasks related to business requests.

https://dotnetworkflow.jira.com/wiki/spaces/EIDUG23/pages/2985232071

Â