A white keyboard with the enter button replaced with a button labeled "Access" with an unlocked lock on it's right side.

One of many IBM Security Identity Governance and Intelligence (ISIGI) features, that have it standout from other Identity Access Management Solutions is it's flexibility and customization to run Access Certification Campaigns. In an Access Certification Campaign a Managers, Application Owners, Supervisors can review accesses of a user or users assigned to them and act on them accordingly. In this example our client expects to run a Access Certification Campaign twice a year. In this campaign the Manager's would review their user's access and confirm if the user still requires the specific entitlement.

How to Run an Access Certification Campaign

Step 1: Navigate to ISIGI's Administration Console

ISIGI's Administration Console

Step 2: Click Access Governance Core

Configure > Certification Campaign
Actions > Add
Then Complete the Following forms:
- Campaign Name: Manager Review Access Campaign
- Campaign Type: Provides the manager an overview on the type of campaign that is currently running
- Certification Dataset: Name of the data set that is built to feed the campaign.
- Sign Off: Once the user's manager has acted on a user's request, this shows the option of when the change is committed.

Step 3: Set a Supervisor

The Supervisor of the Campaign must have the Entitlement of Reviewer Supervisor.
This user can only view the current status of the campaign and the list of managers who have reviewed their user's accesses.

Step 4: Set a Default Reviewer

The Reviewer of the Campaign must have the Entitlement of User Manager.
This user can review the accesses of users that do not have an assigned manager.

Step 5: Set a Fulfillment

Logically Deletion: Immediately apply the change of the manager on sign-off.
Physical Deletion: Flag the change of the manager on sign-off.
Custom Behavior: Customize actions to be done on the access after manager sign-off.
Physical Deletion After Workflow: Customize actions to be done on the access after manager sign-off.

Step 6: Set a Schedule

Set a schedule on how long the campaign will run for.
Set a schedule on the frequency of the campaign. We have it set to 6 months to have it run 2 times a year.

Step 7: Set a Notification

Emails will be sent to the Reviewers/Supervisors on if the campaign has started and/or is about to end.

Step 8: Launch the Campaign

Select the newly created campaign then click Actions > Launch.
Now the Manager's can see the Campaign from ISIGI's Service Centre and Act on the users assigned to them.

How to Run an Access Certification Campaign With IBM ISIGI

Services

Solutions

Pricing

Resources

Events

About Us

Get Started