To enable or disable Smart Provisioning functionality or edit global defaults for suggested roles and compliance checking across all tasks, log into the User Console as an administrator and go to System, CA GovernanceMinder Configuration, Define Configuration, and access the Smart Provisioning tab.
Note: If any task must be configured differently than the global settings, you can adjust the settings at the task level. Task-level settings override global settings.
You can edit the following Smart Provisioning settings:
Enables or disables Smart Provisioning functionality. Smart Provisioning can be disabled even though a connection with CA GovernanceMinder exists.
Determines whether the Suggested Provisioning Roles button appears on the Provisioning Roles tab.
Defines the search screen used for the role suggest feature.
Determines whether the Advanced Suggestion Configuration section appears on the results page of the role suggest feature, after a search is performed.
The Advanced Suggestion Configuration section allows administrators to enter new criteria for a suggested roles search. Administrators can select the type of criteria (Matched Rule and Matched Attributes).
Determines whether CA IdentityMinder suggests provisioning roles if the current user matches the rule that determines membership in a CA GovernanceMinder role.
You can override this default setting during the search using the Advanced Suggestion configuration screen.
Determines whether CA IdentityMinder suggests provisioning roles that other users who have similar profile attributes also have.
You can override this default setting during the search using the Advanced Suggestion configuration screen.
Determines the display of columns in the list of suggested provisioning roles. When this option is selected, CA IdentityMinder displays the Weighted Score column, which indicates the highest score the suggested provisioning role received across all the criteria in the search.
Defines a threshold for 'Matched Attributes' search results returned by the suggest role feature. For each suggested role, CA GovernanceMinder returns a score from 1 to 100 percent depending on the level of attribute matching. Roles suggested with a score less than the threshold are not displayed.
Note: Some CA IdentityMinder attributes may be more important to you than others, therefore CA GovernanceMinder allows you to customize the weight of any attribute in order to provide more useful analytics. For more information about setting attribute weights, see the Configuration Guide.
Determines if the Bulk Loader task uses ‘Matched Rules’ to search for roles. Any roles returned are automatically assigned.
Determines if the Bulk Loader task uses ‘Matched Attributes’ to search for roles. Any roles returned that exceed the Weighted Score Threshold are automatically assigned.
Defines a threshold for 'Matched Attributes' search results returned by the suggest role feature. For each suggested role, CA GovernanceMinder returns a score from 1 to 100 percent depending on the level of attribute matching. Roles suggested with a score less than or equal to the threshold are not assigned.
Note: Some CA IdentityMinder attributes may be more important to you than others, therefore CA GovernanceMinder allows you to customize the weight of any attribute in order to provide more useful analytics. For more information about setting attribute weights, see the CA GovernanceMinder Configuration Guide.
Determines the level of information from the CA GovernanceMinder compliance analysis that CA IdentityMinder displays.
You can set the following levels:
Note: For more information about the behavior of the different levels, see Types of Violations.
Indicates the minimum severity score of compliance violations to display. For example, if you specify 75, CA IdentityMinder only displays compliance violations that have a severity score of 75 or above.
This setting limits the number of compliance violations that appear for the task.
If Issue Error Messages is selected, this setting also affects which tasks can be submitted. For example, if you set the cutoff to skip errors with low scores, users can submit tasks that contain errors.
When selected, compliance checks occur automatically when a task is submitted. Users do not have to manually select the Check Compliance button to see compliance violations.
Note: If enabled, tasks executed by TEWS also enforce compliance checks on submit. This option does not apply to bulk loader tasks.
|
Copyright © 2014 CA.
All rights reserved.
|
|