CA Identity Governance Configuration Guide › Defining a CA Identity Governance Universe

Defining a CA Identity Governance Universe

This scenario describes how to define a CA Identity Governance universe.

A CA Identity Governance universe is a view into a management workspace that enables CA Identity Governance administrators to manage entities such as users, roles, and resources. Entity data is stored in the CA Identity Governance database. A universe consists of a specific pair of Master-Model configurations. These configurations enable you to track the differences between the real-world configuration that is imported from the system (Master), and the desired configuration generated (Model).

A CA Identity Governance universe stores imported endpoint data from such sources as CA Identity Manager, CA IAM Connector Server, CFG, and so on.

Some of the configurations that every universe contains are as follows:

• Master - An image of the privilege model exactly as it is on the target system.
• Model - An image of the privilege model as CA Identity Governance prefers to be, having undergone such actions as certification, compliance, or role modeling.
• Field names (in the configuration files) that contain the following information:
  • User login credentials
  • Email address
  • User manager
  • Role manager
  • Resource manager
• Audit Settings file name.

Note: For more information about additional configurations, see the Configuration Guide.

The following diagram outlines the steps that are required to define a CA Identity Governance universe:

Follow these steps:

1. Add a universe.
2. Define an import connector.
3. Complete the Universe definition.
4. (Optional) Customize universe tables.
5. (Optional) Customize Workflow display settings.