Application

Add an Application Workflow 

1. Go to Workflow > Add Workflow.

   

2. On the add workflow screen, enter the following details:

   

   • Workflow Name: Enter a Workflow Name.

   • Workflow Type: Choose Workflow Flow Type as Access Certification. 

   • Workflow For: Choose Application from the drop-down.

3. Click ADD.

4. The Configuration screen appears by default.

   

5. Select the following checkboxes:

   • Allow Terminate User in Campaign Review: Check the box to enable the user's termination in a campaign review. 

   • Allow Multi-select User option in Campaign Review: Select this box to select multiple users for a campaign. Check boxes against each user will be displayed in the review list. If you uncheck this box, check boxes against each user will be disabled.

   • Immediate Fulfillment Certification: Select this option if you want the fulfilment immediately after completing the campaign.

   • Delayed Fulfillment Certification: Select this option to postpone fulfilment certifying a User/Role/Application/entitlement during a campaign.

   • The number of users to be listed in the review email: Enter the number of users listed in the email notification to a reviewer.

   • Schedule Workflow: Select this check box to schedule a campaign periodically, that is, weekly, monthly, etc., with the date and time set.

   • Automatic fulfilment:  Select this option if you want the system to act on the fulfilment process when access is revoked automatically.

   • Perform Suspend operation: Select this option to suspend access when access is revoked.

   • Perform Delete operation: Select this option to delete access when access is revoked.

6. Click Save.

Add a Target

1. Click Target > Add Target.
   

   

2. Provide the following details:

   

   • Application Name: Enter the Application Name and choose from the results.

   • Review all users: Check the box if all the users having access to this target application have to be reviewed.

   • Role: Users present in the selected role who have access to the target application selected above will be reviewed.
     

3. Click Add.

Add a Reviewer

1. Click Reviewers > Add Reviewer.

   

2. Enter the name of the Reviewer and the Approver Type.

   1. Approver type as Manager: Select the approver type from the drop-down menu. Once selected, the approver will receive the mail containing a list of users for whom the campaign should be done. The manager can just log in to the end user portal, check the review task, and can take action either can retain or revoke the user's access. 

      • Step Duration: Configure the number of days after which the automatic option of Retain or Revoke will be taken.

      • Action to be taken when step duration exceeds: Enter the action to be taken when the step duration exceeds the number of days. Either Auto-Retain or Revoke.

   2. Approver type as Role: Select the approver type from the drop-down menu and enter the role. The approver will receive a mail that contains the list of users for whom the campaign should be done.  Users who are part of the role can just log in to the end user portal, check the review task, and can take action either can retain or revoke users’ access. 

      • Role: Search for the role and select a role.

        

      • Required Approval from All: This option can be enabled if you want all the users present in the selected role must take action to either Retain/ Revoke the configured Target.

      • Step Duration: Configure the number of days after which the automatic option of Retain or Revoke will be taken.

      • Action to be taken when step duration exceeds: Enter the action to be taken when the step duration exceeds the number of days. Either Auto-Retain or Revoke.

        
        

        c. Approver type as User: Select the approver type from the drop-down menu and provide the username. The approver will receive the mail containing a list of users for whom the campaign should be done. The user mentioned in the approver tab can just log in to the end user portal, check the review task, and can take action either can retain or revoke the user's access. 

        

      • Required Approval from all: This option can be enabled if you want to add multiple reviewers. In this call, all the users selected must take an action of either Retain/ Revoke the configured Target.

      • Step Duration: Configure the number of days after which the automatic option of Retain or Revoke will be taken. 

      • Action to be taken when step duration exceeds: Enter the action to be taken when the step duration exceeds the number of days. Either Auto-Retain or Revoke.

      3. Click Add.

Review Campaign

1. Here all the campaign details will be captured, including Campaign ID, Start Time, End Time, and Status of the campaign. 

   

2. Campaigns that are completed have the View Details button where you can view the complete details of a campaign and download the report.