Release Notes › New Features › r12.5 › CA Role & Compliance Manager Integration › Smart Provisioning

Smart Provisioning

Smart Provisioning is a collection of functionality that simplifies provisioning role assignment when CA Identity Manager integrates with CA RCM. This functionality includes:

• Suggested Provisioning Roles

  CA Identity Manager can provide administrators with a list of provisioning roles that may be appropriate to assign to a user. The list of provisioning roles is determined by CA RCM, based on criteria entered by the administrator.

  Suggested provisioning roles ensure that users have the correct privileges, while maintaining a company's role model.

• Policy Validations

  CA Identity Manager administrators can validate proposed changes against a role model in CA RCM before committing changes. Validating changes before they are committed helps companies maintain the role model that they have defined for their operations.

  Users can validate proposed changes to provisioning roles (assigning or removing them), and changes to user attributes.

  CA Identity Manager performs two types of policy validations:

  • Compliance

    Proposed changes are validated against the CA RCM role model to see if they violate explicit, predefined business policy rules in CA RCM.

  • Pattern

    Proposed changes are compared to the CA RCM role model to see if they cause the subject of the change to become "out of pattern." CA Identity Manager also makes sure that the changes do not significantly alter an established pattern in the role model.

  You can configure CA Identity Manager to perform these validations automatically when users perform certain tasks, or allow users to initiate the validation manually.

You can implement Smart Provisioning in an Identity Manager Environment once there is an established role model, based on Identity Manager data, in CA RCM.