Introduction

You can create account certification campaign to certify accounts based on their compliance status.

Steps to guide you with example

1. Create campaign
2. View campaign
3. Edit campaign
4. Pause and resume campaign
5. Cancel campaign

1. Create campaign

Navigate to Applications -> Access certification -> Create campaign

• General setup
  Specify campaign name, optionally add description, select Account campaign type, and priority.

  

• Scope
  Select applications to review user accounts in this campaign. All users and groups that are entitled to the selected applications will be included. To filter this campaign's scope to a subset of users and groups, use Include only option to select specific users or groups, or use Except for option to select all entitled users and groups except for specified users or groups. If users or groups are added in Include only section. Then, Except for configuration will be ignored. All accounts in the selected applications will be included. You can select compliance status of accounts to limit the scope the campaign. By default, all accounts will be included in this campaign.

  • Scope applications

    

  • Scope users

    

  • Scope accounts

    

• Reviewer settings
  Select reviewer to certify accesses for users. There are 2 options to select reviewer.

  • User manager or application owner: Accounts with a known user are reviewed by the user's manager. Accounts without a known user or with a user who doesn't have a manager listed are reviewed by the application owner.

    

  • Specify reviewer: search an user and add single reviewer for all accounts in the campaign.

    

You can choose to log reviewer's decisions to know about each account. There will no change in account status. Otherwise, you can choose when reviewer's decisions should take effect.

• When the campaign ends: Rejection will trigger deprovision of account according to the lifecycle policy for application once campaign will end.

• Immediately: Rejection will trigger an immediate deprovision of account according to the lifecycle policy for application.

• Let the reviewer decide: Reviewer can decide to deprovision account immediately or when campaign will end.

• Campaign supervisor settings
  If you wish to add other users to help you to track the progress of campaign. Then, you can add one or more users as supervisor of the campaign. They can track the progress of the campaign along with you.

  

• Schedule
  You can either start campaign immediately or select a start date and time along with a frequency to re-run the campaign. Duration of the campaign should be between 1 to 365 days for reviewer to certify accesses.

  • Schedule immediately

    

  • Schedule later on

    

• Reminder and campaign end
  If you wish to set reminder for reviewers. Then, you can specify the number of days to send daily reminders to reviewer before campaign ends. You can define the action for unreviewed accounts after the campaign ends.

  • Take no action: There will be no change in the accounts.

  • Approve all: All accounts will be approved automatically.

  • Reject all: All accounts will be rejected automatically.

    

2. View campaign

You can select a campaign to view its configuration details and progress.

• Campaign results by reviewer

  

• Campaign results by account

  

3. Edit campaign

You can edit description and priority of the campaign.

4. Pause and resume campaign

You can pause the campaign.

Once campaign is paused. Then, reviewers will no longer see campaign to certify the accounts.

You can also resume the campaign.

Once campaing is resumed. Then, reviewers will start seeing campaign again to certify the accounts.

5. Cancel campaign

You can cancel the campaign.

Once campaign is cancelled. It will be no longer available for review.

💎

Aakash Prajapati, IBM Security