Person Validity Type Recertification Policy

Recertification policies are policies that you add to audits to generate recertification review tasks for the access assignments given to people, roles, groups, and Query-Based collections. The person validity recertification policy is used to certify the person should exist or not. Possible decisions are: certify, disable and delete. We will create a person validity type recertification policy in this post and add a target to it.

Create a Person Validity Type Recertification Policy

1. Log in to the EmpowerID web application as an auditor or other person with the ability to configure audits.

2. On the navbar, expand Compliance and select Recertification.

3. On the Recertification page, select the Recertification Policies tab
   

   

4. Then click + icon to create a new Recertification Policy

5. The policy details page opens up.

6. Select policy type as ‘Person Validity.’ Enter any name, display name, and description.

7. Click on Save.
   

   

   
   Add the target type “Business Role and Location” to the policy created

8. Click on the '+' icon at the bottom of the policy details page to add the target

9. The attestation policy target section opens up.

10. Under the type dropdown, select ‘Business Role and Location.’

11. Under the business role dropdown, please search for a business role and select it.

12. Under the location dropdown, please search for a location and select it.

13. Click on Save.
    

    

    
    Add the target type “Group” to the policy created

14. Click on the '+' icon at the bottom of the policy details page to add the target

15. The attestation policy target section opens up.

16. Under the type dropdown, select ‘Group.’

17. Under the enter, a group name to search dropdown, search for a group, and select it.

18. Click on Save.
    

    

    
    Add the target type “Location” to the policy created

19. Click on the '+' icon at the bottom of the policy details page to add the target

20. The attestation policy target section opens up.

21. Under the type dropdown, select ‘Location.’

22. Under the location dropdown, please search for a location and select it.

23. Click on Save.
    

    

    
    Add the target type “Management Role” to the policy created

24. Click on the '+' icon at the bottom of the policy details page to add the target

25. The attestation policy target section opens up.

26. Under the type dropdown, select ‘Management Role.’

27. Under the enter a management role name dropdown, please search for a management role and select it.

28. Click on Save.
    

    

    
    Add the target type “Management Role Definition” to the policy created

29. Click on the '+' icon at the bottom of the policy details page to add the target

30. The attestation policy target section opens up.

31. Under the type dropdown, select ‘Management Role Definition.’

32. Under the enter a management role definition name dropdown, please search for a management role definition and select it.

33. Click on Save.
    

    

    
    Add the target type “Person” to the policy created

34. Click on the '+' icon at the bottom of the policy details page to add the target

35. The attestation policy target section opens up.

36. Under the type dropdown, select ‘Person.’

37. Under the enter a person name to search dropdown, please search for a person and select it.

38. Click on Save.
    

    

    
    Add the target type “Set Group” to the policy created

39. Click on the '+' icon at the bottom of the policy details page to add the target

40. The attestation policy target section opens up.

41. Under the type dropdown, select ‘Set Group.’

42. Under the enter a query-based collection name to search dropdown, please search for a query and select it.

43. Click on Save.
    

    

44. The person validity recertification policy type with various target types is created as below.
    

    

    
    

Next Steps

• Create Audit