Entitlement owner certification

[Ekata]

Hi Team,

If the entitlement owner is having an account under the same entitlement, what will happen to the certification. Who can certify him/her in case we do not enable the self certification?

Does it go to the campaign owner for certification?

Please advise.

Regards,

Ekata

[smitg]

@Ekata if self certification is not allowed then campaign owner or anyone with ROLE_ADMIN sav role can certify the access

[Manu269]

@Ekata 

Allow Self Certification -- If this option is enabled , EIC  allow the certifiers to certify their own access.

In case this is not enabled, then only user with SAV ROLE_ADMIN can take action on it.

Hence as a practice, you can use teh feature Show Consult for Own Access > ON.

This allows certifiers to consult other users for reviewing and certifying their own access requests. 

[Ekata]

Hi @Manu269 Thanks for the response. I have enabled the show consult for own access and assigned(consulted) it to one of the test user but there is no action after this. 

How will the test user perform the action on the account? Will there be only email sent and no action will be performed by that user or is there any other step which is missing? Also, I tried to reassign the account, that option is visible but is not working. can you please help on this.

Regards,

Ekata

[smitg · Accepted solution]

Hi @Ekata 

• For consult option, email can be configured under Configuration > Basic Campaign Notifications to notify the consulted user

• A new certification will be created for consulted user, they can take action by logging in to Saviynt
  
• Once the consulted item is completed notification can be sent to original user. Action taken will be displayed in the original certification.
  
• There wont be any reminder sent for consulted user if they wont take any action. Original user cant lock the certification until consulted item is actioned.

Thanks,
Smitha

[smitg]

For Reassigning a user, please make sure below configuration under Configuration> policy is enabled before launching the campaign

[Ekata]

Hi @smitg Thanks for the solution. Is there any possibility to assign the cert to a particular user in case of SOD violation or do we need to rely on the owners to assign the cert?

Regards,

Ekata

[smitg]

Hi @Ekata,

I dont think there is any possibility to re assign certificate based on SOD violation. This has to be done manually.

Thanks,
Smitha