How to add target entity type in access certification

Products Identity Manager Discussions & Questions
, ,
1

Hello Everyone,
Could someone help me find the XML to add additional “Target Entity Type” for the Access Certification Campaigns?

image
image1060×559 49.7 KB

2

Hello Kamil,

It is dynamic.

When you add the permission to certify an EntityType it will be displayed in the “Target Entity Type” list.

Example: Permission for the departments

  <AccessControlRule Identifier="Administrator_AccessCertificationItem_Custom_AccessCertification_Assign_Directory_Organization" DisplayName_L1="Administrator - Access certification auto assign" EntityType="AccessCertificationItem" Profile="Administrator">
    <Entry CanExecute="true" Permission="/Custom/AccessCertification/AutoAssigned/Directory_Organization" />
    <Entry CanExecute="true" Permission="/Custom/AccessCertification/ManualAssigned/Directory_Organization" />
  </AccessControlRule>

image
image1090×585 31.7 KB

2 Likes
3

Hello Hazem,

So it is this part from the documentation.
Access Certification | Netwrix Product Documentation

image
image1052×197 15.8 KB

This was confusing to me because of the word “profile”. so, we are giving a specific profile access to this Entity type in the certifications campaign.

The profiles that we have in the assigned profiles are not what is referred to here but the one we create with the Certification policy?

<AccessCertificationCampaignPolicy Id="-2" Identifier="Manager" DisplayName_L1="Manager" DisplayName_L2="Responsable"/>