Previous Topic: How to Define a UniverseNext Topic: Define an Import Connector


Add a Universe

To create a universe in CA GovernanceMinder, note the names of the Master and Model configurations and determine audit settings. The Master and Model configurations and the audit settings affect universe behavior. Master and model configurations are unique for each universe. Do not create more than one universe that uses the same master or model configuration. Examples of configuration file names: XX_master.cfg, XX_model.cfg

Note: Configuration file names cannot contain slash ("/" or "\") characters.

Follow these steps:

  1. In the Portal, go to Administration, Universes.
  2. Click Add New.
  3. Provide values for mandatory fields:

    Note: An orange dot indicates a mandatory field.

    Master Configuration name

    Defines the configuration that is an image of the privilege model exactly as it is on the target system.

    Model Configuration name

    Defines the configuration that is an image of the privilege model as CA GovernanceMinder prefers to be.

    Audit Settings File

    Specifies the parameters and settings that define the audit and pattern-based checks that are performed on the master configuration at the end of the import.

    These parameters and settings specify which pattern and Business Policy Rules (BPR) checks are run. A BPR expresses business, provisioning, or security constraints as a logical condition that can be applied to the entities and links in a CA GovernanceMinder configuration. For example, a new link between a user and a resource violates a certain predefined BPR rule. If the BPR in which the rule is written is in the audit setting file, it is tested at the end of an import and an alert is raised.

    Note: When you create multiple universes, it is good practice to use a custom audit settings file. This approach enables you to tailor the audit settings file to each specific universe. You also reduce the number of unnecessary alerts by defining a BRP file that is specific to the universe.

    Follow these steps:

    1. Navigate to the CA\RCM\Server\eurekify-jboss\conf\audit directory
    2. Open the default-parameters.properties file in a text editor.
    3. Click File, Save As, and save the file in the CA\RCM\Server\eurekify-jboss\conf\audit directory with a name that identifies the universe you want to use.
    4. In the Portal, Add New Universe screen, select the new file instead of the default audit settings file.
    5. Click Save.
  4. Click Save.

    Next, define an import connector.