Previous Topic: Iterated SearchNext Topic: Discovering Rule-Based Roles


Discovering Characteristic Roles

It is often preferable to create roles around organizational units, functions, locations, reporting structure, etc. The characteristic roles function help automate this process.

You can seek roles that are characteristic to each organizational unit by selecting the organizational unit attribute of a user, and running a search with the preferred parameters.

The following table describes the specific fields of the characteristic search:

Field

Description

Role Name Prefix

Set a prefix to be included as part of each role discovered.

User Attribute

You set one of the users attributes to serve as the basis for the characteristic role search. CA GovernanceMinder will create roles for each group of users that have same value in the selected attribute. Thus, if you select the organization field, CA GovernanceMinder will create organizational roles.

Resource Attribute

You set one of the resource attributes to serve as the basis for the characteristic role search. CA GovernanceMinder will create roles for each group of resources that have same value in the selected attribute. Thus, if you select the Res Name 1 field, CA GovernanceMinder creates roles based on values belonging to Res Name 1.

From/To Attribute Value

Specify the range of values for which roles will be searched. This is useful in case you wish to search for a single role, or for a part of a hierarchy.

Minimum Percent of Sub-Group Users

Specify the threshold for creating a characteristic role. For example, you may require a role that characterizes at least 90% of the users in each of the sub-groups. If you specify a high value, CA GovernanceMinder may not find a role for all selected groups. In any case, CA GovernanceMinder will only associate with the role users that have the role's resources. Use "almost matching" search to identify users that almost match.

Preferred Search Mode

Indicates whether to make the Users, Resources or User-Resource Connections the focus of the roles created by the rule.

The rest of the parameters of the Characteristic Roles Search are similar to the ones that you have already seen in the Basic and Iterated Searches.

More information:

Iterated Search