Skip to main content

Perform Access Certification

How to certify existing access by reviewing a specific range of assigned permissions for auditing purposes.

Overview​

The aim of an access certification campaign is to review specific entitlement assignments for specific identities, in order to certify them and express an audit opinion that justifies their necessity. So, for all relevant permissions, the idea is to specify if these assignments ought to be deleted or not.

There are several ways to arrange an access certification campaign. Among others, through filters you can choose to focus on:

  • a certain category of roles;
  • a certain type of assignment;
  • assignments not certified since a certain date;
  • assignments presenting a certain level of risk.

Certification campaigns can be configured with XML but the UI described in this guide can be enough on its own.

Participants and Artifacts​

This operation should be performed in cooperation with the staff in charge of auditing because they know which entitlements need to be reviewed.

InputOutput
Identity repository (required) Role catalog (optional) Risks (optional)Certified access

Perform Access Certification​

Perform access certification by proceeding as follows:

  1. Schedule a certification campaign.
  2. Execute a certification campaign.