Administration Guide › CA Role & Compliance Manager Integration › Compliance and Pattern Messages › Pattern Messages

Pattern Messages

Pattern messages identify proposed changes to provisioning roles or user attributes that violate patterns in the CA RCM role model. CA Identity Manager performs the following types of pattern checks:

• User does not match predefined rule

  Indicates a conflict between the proposed change and the explicit rules for a role in CA RCM.

• Role assignment out of pattern for user's privileges

  Users who have similar privileges typically do not have this role.

• Too many privileges accumulated

  The user may have accumulated access to roles and resources that they no longer need over a long period.

• User assigned with too many roles

  The user has more roles than most users.

• Role assigned with too many users

  The role has more users than most roles.

• Duplicate user and role definition link detected

  The user is linked to the role in the message by more than one method.