Previous Topic: Audience

Next Topic: Using The CA RCM Portal Interface

Typical Processes

The CA RCM Portal provides access to both information and processes necessary for system-wide role management, compliance management, certification campaigns and relevant security management oversight.

The following are the main CA RCM Portal processes:

Ticket Based Task Management

Most business managers and resource owners in the company interact with CA RCM through a ticket based task management system. When users log in to the portal, their Inbox contains tickets for any review and certification tasks that are assigned to them.

Running Campaigns

Campaigns utilize CA RCM’s basic auditing tools to run an enterprise certification and attestation process by designated approvers. The purpose of the campaign is to certify that granted privileges comply with the business and regulatory needs, and that they are not over allocated. This process is supported by the CA RCM Audit Card facility which allows the presentation of out-of-pattern and non-compliance information to the approver. The campaign administrator can apply pattern recognition tools and policy enforcement rules to analyze a configuration and run a comprehensive audit. The output of an audit is the Audit Card, which contains a list of all suspicious records and the type of suspicion involved (currently about 50 different types).

Part of the cleansing process and an important step before starting the role engineering process is for business managers (Approvers) to review the access rights. A manager can be in charge of a team of users, one or more roles or one or more resources. In a business with over 1000 users, the help of the managers is required to speed up the cleansing process. Depending on the campaign definitions, the business managers may be required to review the access rights of their employees and/or resources under their jurisdiction, and report the change requests to the CA RCM Administrator. Campaigns are used not only in the enterprise cleansing phase, but also for periodic certification as required by regulation.

Self-Service

Managers can use the CA RCM Portal to manage their team’s role definitions and access to corporate resources. Users can also manage their own personal privileges with regard to system roles and resources.

Entity Browser

This browser aids the administrator/business manager who is using the CA RCM Portal in viewing entities (i.e. users; roles; resources) associated with a specific Universe under a selected configuration. The information is displayed in table format. The tables contain basic information for each entity.

Running reports

Provides access to a variety of reports.

Dashboards

Automatically shows users useful statistical information as they go about their tasks.

Administration

Administrators can create a universe, generate import/export connectors and define their scheduling. They can also perform other functions available only to senior administrators.

More information:

Using The CA RCM Portal Interface