Questions and concerns about the access certification processes and their review

Identity Governance & Administration (IGA) Access Certification
1

I have a few questions regarding access certifications.

  1. Do certification campaigns have a closing or completion date? I see the “Days To Completion” field in the dashboard, but I can still take action on the campaign even after the days have passed.
  2. Is it possible to see the end date of a certification campaign anywhere? How do I identify when it’s over?
  3. Once a certification campaign is completed, is there a way to automatically revoke the entitlements that weren’t addressed? Is there a way to automatically revoke the entitlements that weren’t addressed? Or is there simply no action taken?
  4. Regarding the certification reports, I have the following:
  • SCOPE REPORT downloads a report, but it’s always empty (no data).
  • The RESULT REPORT always generates the following error: “Currently there is no report available, please try again later or contact the system administrator.”
  1. What is required for the campaign reviewer to be able to delegate approvals? Is there a specific permission? When I try, I get the error that an approver cannot delegate.

I have tried versions 4.2.1.7 through 4.2.1.11 with the same results.

2

Hi Julian,

Thanks for raising these questions about user access reviews

  1. In the 4.2.1.x version the end date does not force an end to the campaign. Its used more for tracking timelines, due dates and warning. In the 4.2.2 release the end date does end the campaign and there are options to revoke access that has not be reviewed by that date.

  2. Only the start date is shown and the days for each steps. In 4.2.2 the due date is shown on each screen.

  3. This is only possible in 4.2.2

  4. I will check on the issue with the reports and provide an update here

  5. There is an out of the box role called UAR Admin that enables this functionality.