Symantec IGA

 View Only
  • 1.  GovernanceMinder - Cascade campaigns

    Posted May 15, 2015 04:09 PM

    Hi Team,



    I am looking for a possible solution for the below requirements, Please
    suggest how to achieve this.



    We have two campaigns



    1. Data owner campaigns (Resources or application certifications by
      respective administrators)
    2. Manager campaign ( User manager will certify entitlement of their reportee’s)





    We will start with Data owner campaign first where data owners will approve
    or reject user access to their respective applications.



    Once this campaign is completed then we want to start the Manager campaign,



    In the manager campaign we want to highlight all those users who were
    rejected by administrators during Data owner campaign as a violation.



    So if a manager approves these users he will enter a comment to raise a
    security exception.



    Can some help me with how can we feed the data owner campaign attestations
    into User manager campaign which can show violations if there are any?



    Thanks & Regards,




  • 2.  Re: GovernanceMinder - Cascade campaigns

    Broadcom Employee
    Posted May 16, 2015 10:35 AM

    Hi Satya,


    We can save the certification results to an audit card and import the same into an other certification.

    To export the certification results to an audit card, in the IG Administration portal.

    Go to Administration > Work Flow settings > Export Certification Progress to audit card.

    To import them into an other certification

    Go to Administration > Work Flow settings > Import certification progress from audit card.


    For more detailed steps, please refer to the below sections in Administration guide.

    Administration GuideCertificationsSave Certification Decisions to an Audit Card

    Administration GuideCertificationsImport Previous Decisions Into a Certification




  • 3.  Re: GovernanceMinder - Cascade campaigns

    Posted May 18, 2015 11:47 AM

    Thanks Yogitha let me try these options and will let you know the results.



  • 4.  Re: GovernanceMinder - Cascade campaigns
    Best Answer

    Posted May 20, 2015 11:14 AM

    Hi Team,

    This has been answered and below is more information on how to achieve this.

    We wanted to have Usermanager see all the entitlement decisions taken by Dataowner in his campaign hence need to do below

    1. Create Dataowner campaign.

    2. Dataowner to approve/reject entitlements and submit.

    3. Export Dataowner decisions to audit file.

    4. Create a Place holder Usercertification with "manual start".

    5. Import Audit card decision from step3.

    6. Create a recertification template with below properties

        a. type -> user privileges

        b. states -> pending, approved:  show approver's selection, rejected: show approver's selection

    7. Launch User certification using recertification template from Step 6 & choose Place certification created in 4 which has audit card decisions imported.