|
Process:
|
- Scheduled and ad-hoc.
- Event triggered (e.g., via transfer).
- Controlled scope.
|
Review:
|
- Subordinates per manager.
- Entitlements per user.
- Users per entitlement.
|
|
Certify:
|
- Employment, subordinate/manager relationship.
- Continued relevance of entitlements.
|
Remediate:
|
- Terminate or transfer users.
- Deactivate roles, login IDs, group memberships.
|
|
Workflow:
|
- To invite certifiers.
- Reminder e-mails, escalation, delegation.
|
Access controls:
|
- Who can certify whom?
- Who can manage the process?
- What identity data can be displayed?
|
|
Reports and dashboards:
|
- Coverage.
- Progress.
- Changes on target systems during review.
|
Analytics:
|
- Who has what (incl. history).
- Compare users, roles, entitlements.
- Effective role assignment.
- SoD violations, orphan/dormant accts.
|
