Previous Topic: Integrating CA Identity Governance with CA Identity ManagerNext Topic: Use Case: Maintaining Compliant CA Identity Manager Roles


Use Case: Certifying CA Identity Manager Provisioning Role Assignments

As an Administrator, you want to allow managers to review and certify the provisioning roles of CA Identity Manager users they manage.

Perform the following process to allow managers to perform user certifications.

  1. Integrate CA Identity Governance with CA Identity Manager.
  2. Import data from CA Identity Manager to CA Identity Governance.

    This procedure updates the Master and the Model configuration in CA Identity Governance.

  3. Kick off a user certification to review and approve user provisioning role assignments (and direct permissions).

    This certification updates the CA Identity Governance Model configuration.

  4. Once the certification is completed, export the differences generated by the certification. The changes are applied to CA Identity Manager directly.

    CA Identity Manager records these changes in the task persistence database, where they can be viewed in the View Submitted Tasks task.

After completing this process, role assignment data between CA Identity Governance and CA Identity Manager is synchronized and approved by CA Identity Manager user managers.