User Manager as Primary Certifier

[igaravi]

Hello,

We have an use case where to re-certify access to Entitlement, first the User's Manager need to certify and once approved, that should go to the entitlement owner for certification. What campaign should we use here?

Thanks

[dgandhi · Accepted solution]

HI @igaravi 

Please use Tiered campaign approach. Below link provides the details.

https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter15-Campaigns-and-Certificati...

How to launch Tiered Campaign

https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter15-Campaigns-and-Certificati...

Above link explains the steps to launch the campaign along with example.

<<

It is pivotal to perform a double review of critical accesses to avoid any compliance issues, misuse of accesses, or SOD violations. IGA provides Tiered Campaigns to address these important concerns by performing double reviews. Using the Tiered Campaigns, you can sequence multiple reviews one after the other within the same certification campaign. For example, you can initiate a User Manager campaign and perform the necessary actions in Step 2 of the User Manager campaign. After completing the User Manager Campaign, you can create an Entitlement Owner campaign and use the Advanced Campaign Query to fetch the approved or rejected items from User Manager campaign by specifying the name of the User Manager Campaign in the Advanced Query.

When you launch the Entitlement Owner campaign, based on how you have framed the Advanced Query the approved, rejected items or both (approved and rejected) can be filtered and fetched for second review in the Entitlement Owner campaign. The Entitlement Owner can take actions on the already acted upon line-items by the User Manager. For revoke actions taken by the Entitlement Owner, a revoke task will be created. The benefit of the Tiered Campaign is it helps to perform a second review and correct necessary actions that were previously taken from the User Manager campaign.

>>

Thanks

[nimitdave]

As mentioned by @dgandhi is the approach to use tiered campaigns in saviynt.

But if you are looking for a single campaign to have 2 levels of certification, that is not possible.