Certification of roles

[Ekata_bharati]

Hi Team,

We have a requirement for certification where the roles and the child roles are involved.

Can we do a certification where the manager can receive a campaign to certify a role and the child roles present inside it.

For example we have a role ABC and child roles inside as XYZ and PQR. is there any way that we launch a user manager campaign and get the roles certified.

Please advise.

Regards,

Ekata

[rushikeshvartak]

• You can achieve same using Role Owner campaign 

[Ekata_bharati]

Hi,

How can we send the review to the specific user's manager in case of role owner campaign?

As per my understanding there will be 1 role owner defined and then he can certify but, in this requirement, they want to send it to the managers.

[rushikeshvartak]

• You can't send to manager , you can only send to role certifier and manager as secondary certifier

[NM]

Hi @Ekata_bharati , if you want respective manager to certify the access then user manager campaign is the only viable option.

Object to be certified you can select enterprise role.

[Ekata_bharati]

Hi, Thank you for the reply.

How can I select only a set of roles to be certified in role owner campaign?

For example in EO cert we can use the advance query to change risk type and that particular entitlement will be picked.

can we use the same advance query to select the roles start with "sasSales%". how can we achieve it.

[NM]

Hi @Ekata_bharati , in the role owner campaign select role query in campaign based of 

Then in advance role query you can apply the filter

[Amit_Malik]

Hi @Ekata_bharati , you can use Roles Query in configurations , it is a HQL.

Select campaign based on as Role query

[rushikeshvartak · Accepted solution]

Refer https://forums.saviynt.com/t5/identity-governance/role-owner-campaign-configuration/td-p/114531 

[Ekata_bharati]

Thank you.

Can we see the child roles in role owner verification. Below is the example where the role has 2 child roles however I can just manage to see the users and entitlements for that role but not the child roles present in it.

[rushikeshvartak]

No its not configurable