Creating a campaign

About this task

Administrators can manage all campaigns. Application owners can manage campaigns only for the applications that they own.

Procedure

  1. Navigate to Governance.
    The page shows the number of campaigns that are running, scheduled, paused, and closed.
    The summary tables display the following categories for each running or pending campaign.
    • Name
    • Progress
    • Type
    • Applications
    • End date
    • Time left
  2. Click Create Campaign.
  3. Specify the following information.
    Name
    The name for the campaign.
    Description
    Optionally, provide the reason or purpose of the campaign.
    Campaign type
    Specify whether the campaign is for user entitlement, group entitlement, or account.
    Priority
    Specify the importance of the campaign, either high, medium, or low.
  4. Click Next.
  5. Set the scope of the campaign.
    1. On the Applications tab, click Choose applications and select one or more of the applications for the campaign.
    2. Click Add.
      The appropriate tabs become active.
    3. Optional: Click the appropriate tab to filter the scope of the campaign.
      The tabs that are displayed depend on the type of campaign.
      Users tab
      Typically, all users and groups that are entitled to the applications are included in the campaign. To limit the scope, you can specify the groups or users that you want to include in the campaign under Include only. All other users and groups are automatically excluded. If you specify to include a group, but want to exclude certain members from the campaign, you can list them under Except for. You can also specify groups that you want to exclude from the campaign.
      Groups tab
      Typically, all groups that are entitled to the applications are included in the campaign. To limit the scope, you can specify the groups that you want to include in the campaign under Include only. All other groups are automatically excluded. If you specify to include a group, but want to exclude certain nested groups from the campaign, you can list them under Except for. You can also specify groups that you want to exclude from the campaign.
      Accounts tab
      You can specify the types of accounts that are included in the campaign based on their compliance status. The default setting is to include all types of accounts. If you do not want to include a status type in the campaign, clear its checkbox.
      • Compliant
      • Non-compliant
      • Unmatched
      • Orphaned
      • Unmanaged
    4. Click Next.
  6. Specify the reviewer settings.
    1. Select who is going to review the campaign.
      For user entitlements
      If you select User manager, a review notification is sent to the manager of each user in the campaign.

      If you select Specify reviewer, use the Search field to find and select a single reviewer for all the users in the campaign.

      For group entitlements
      If you select Application owner, a review notification is sent to the owner of each application in the campaign. The owner of each application must approve the campaign before the entitlement is granted.

      If you select Specify reviewer, use the Search field to find and select a single reviewer for all the groups in the campaign.

      For accounts
      If an account has a known user, the default setting is to have the certification reviewed by the user's manager. If no user is associated with the account or no manager is listed for the user, the review is made by the application owners.

      If you select User manager or application owner, a review notification is sent to the manager of each user that is associated with an account in the campaign. If no manager is available to review the account, a notification is sent to the application owner.

      If you select Specify reviewer, use the Search field to find and select a single reviewer for all the accounts in the campaign.

    2. Determine when reviewers decisions take effect.
      If you select the check box, the reviewer action is not provisioned to the related target application. It is recorded on the IBM® Security Verify logs for reporting and auditing purposes.
      When the campaign ends
      The decision takes effect at the end of the campaign. Decisions can be changed by selecting the Completed tab and expanding the menu next to the decision.
      Immediately
      The decision takes effect immediately and cannot be changed.
      Let the reviewer decide
      When the reviewer makes the decision, the review can choose whether the decision takes effect immediately or at the end of the campaign. If immediately is selected, the decision cannot be changed.
  7. Click Next.
  8. Specify whether to enable redirection to campaign supervisors.
    Campaign supervisors can help the campaign creator manage the progress of the campaign.
    1. Select the Allow redirection to campaign supervisors checkbox.
    2. Use the Search field to select one or more supervisors to help with the campaign.
  9. Click Next.
  10. Set the schedule for the campaign.
    • Select Run immediately and set Duration to the number of days that you want the campaign to run.
    • Select Select a start date and set the start date and time. Set the Frequency to how often you want it to run, and set Duration to the number of days that you want the campaign to run.
    Note: Duration refers to the time that the reviewer has to approve or reject the entitlements.
  11. Click Next.
  12. Set reminders for the campaign and specify what actions to take when the campaign ends.
    1. Select the Send reminders to reviewers checkbox.
    2. Specify when to start sending daily reminders to the reviewers before the campaign ends.
    3. Select what action to take on unreviewed entitlements at the end of the campaign.
      Take no action
      This selection is set as the default action. The entitlement status remains unchanged. If the entitlement was previously approved for the user or group, it is still approved. If it was rejected, it remains rejected.
      Approve all
      This selection grants the entitlement to any unreviewed users and groups.
      Reject all
      This selection denies the entitlements to any unreviewed users and groups.
  13. Click Schedule campaign.
    The campaign is added to the Certification campaigns page.