|
|
|
When users, resources and roles data (if available) is imported into CA RCM, it is converted into a “configuration” document. At this point CA RCM options can be used to automatically analyze the data and “implied” relationships (connections) in the downloaded data to determine roles. A role is a definition of a relationship that exist between users, resources or other roles. Certain roles can imply access to resources that are not immediately apparent. For example, a hierarchical relationship can mean that a user possessing a certain role can actually access resources that are not strictly defined as belonging to him or even in his own physical area of operation. In addition, because of employment circumstances, some employees (users) may have acquired too many resources or some resources may have been improperly allocated to them. DNA contains tools to analyze and propose roles that focus and identify both a specific role phenomenon or many role phenomena at the same time.
These role discovery tools are contained in the Discovery menu option on the menu bar.
Role discovery options include searching for and proposing: basic roles, obvious roles, roles that are almost perfect matches of other roles and identifying role hierarchy. These options contain sub-menus that enable fine-tuning the discovery algorithm to adapt it to the specific configuration that is being analyzed. The user should experiment with these tools and the thresholds that they contain to determine the best tools for the particular configuration. It should be emphasized that the results of running these options are just proposals for role definitions. These roles must be individually examined by the Role Engineer to determine their appropriateness and validity for the organization.
An Entity Report is generated from the Discovery menu when a configuration window is active. It shows basic data including direct resources, sub-roles and parent roles. A report of any single or several highlighted entities can be printed in report form. These printed reports can be sent to other company officials to obtain their comments on the discovered roles or as part of on-going organizational activities.
| Copyright © 2010 CA. All rights reserved. | Email CA Technologies about this topic |