This addon provides the functionality to review users permissions.
In order to install it is nedeed to upload the recertification addon and three workflows:
- Recertification process
- Recertification group process (Review authorizated users list)
- Recertification user process (Users permissions review)
To begin with the recertification process an user with SOFFID_ADMIN permisssion to initiate workflows must starts one and take ownership.It must start it.
Once started, it is needed to select a group on or some groups to apply the recertification process to, as well the role with authorization to recertificate (manager role) and the application (IS) permissions to reviewto identify the business unit manager, who will be responsible for recertificate the current active users. Next step is to select and the applications (a.k.a. Information Systems) whose IT roles will be recertified.It is possible to select more than one group or application to recertificate. Then click on recertificate button.
The role with authorization to recertificate must have been granted to the person in charge of the selected group. Or a user code directly. For differents groups, the manager role can be differentIn small organization, it's possible to select the user name of the manager for each selected group.
At this moment, in 'My tasks', of users at any manager's inbox, with the manager role, appears a new task with all users in group to recertificate. One of them can takeownership and begin with the recertification.
The following step is review the list with roles from the application in that group and decide if they should be keep them or not.
During all process authorizated users can look up the recertification process status and information from the menu entry 'Recertification Info' located in 'Start/Resource Management/Information Systems'.