Creating a campaign

Use this task to create the campaigns.

1. Select Applications > Access certification.
   The page shows the number of campaigns that are running, scheduled, paused, and closed.

   The summary tables display the following categories for each running or pending campaign.

   • Name
   • Progress
   • Type
   • Applications
   • End date
   • Time left
2. Select Create Campaign.
3. Specify the following information.

   Name

   The name for the campaign.

   Description

   Optionally, provide the reason or purpose of the campaign.

   Campaign type

   Specify whether the campaign is for user entitlement, group entitlement, or account.

   Priority

   Specify the importance of the campaign, either high, medium, or low.

4. Select Next.
5. Set the scope of the campaign.
   1. On the Applications tab, select Choose applications and select one or more of the applications for the campaign.
   2. Select Add.
      The appropriate tabs become active.
   3. Optional: Select the appropriate tab to filter the scope of the campaign.
      The tabs that are displayed depend on the type of campaign.

      Users tab

      Typically, all users and groups that are entitled to the applications are included in the campaign. To limit the scope, you can specify the groups or users that you want to include in the campaign under Include only. All other users and groups are automatically excluded. If you specify to include a group, but want to exclude certain members from the campaign, you can list them under Except for. You can also specify groups that you want to exclude from the campaign.

      Groups tab

      Typically, all groups that are entitled to the applications are included in the campaign. To limit the scope, you can specify the groups that you want to include in the campaign under Include only. All other groups are automatically excluded. If you specify to include a group, but want to exclude certain nested groups from the campaign, you can list them under Except for. You can also specify groups that you want to exclude from the campaign.

      Accounts tab

      You can specify the types of accounts that are included in the campaign based on their compliance status. The default setting is to include all types of accounts. If you do not want to include a status type in the campaign, clear its checkbox.

      • Compliant
      • Non-compliant
      • Unmatched
      • Orphaned
      • Unmanaged

   4. Select Next.
6. Specify the reviewer settings.
   1. Select who is going to review the campaign.

      For user entitlements

      If you select User manager, a review notification is sent to the manager of each user in the campaign.

      If you select Specify reviewer, use the Search field to find and select a single reviewer for all the users in the campaign.

      For group entitlements

      If you select Application owner, a review notification is sent to the owner of each application in the campaign. The owner of each application must approve the campaign before the entitlement is granted.

      If you select Specify reviewer, use the Search field to find and select a single reviewer for all the groups in the campaign.

      For accounts

      If an account has a known user, the default setting is to have the certification reviewed by the user's manager. If no user is associated with the account or no manager is listed for the user, the review is made by the application owners.

      If you select User manager or application owner, a review notification is sent to the manager of each user that is associated with an account in the campaign. If no manager is available to review the account, a notification is sent to the application owner.

      If you select Specify reviewer, use the Search field to find and select a single reviewer for all the accounts in the campaign.

   2. Determine when reviewers decisions take effect.
      If you select the check box, the reviewer action is not provisioned to the related target application. It is recorded on the IBM® Security Verify logs for reporting and auditing purposes.

      When the campaign ends

      The decision takes effect at the end of the campaign. Decisions can be changed by selecting the Completed tab and expanding the menu next to the decision.

      Immediately

      The decision takes effect immediately and cannot be changed.

      Let the reviewer decide

      When the reviewer makes the decision, the review can choose whether the decision takes effect immediately or at the end of the campaign. If immediately is selected, the decision cannot be changed.

7. Select Next.
8. Specify whether to enable redirection to campaign supervisors.
   Campaign supervisors can help the campaign creator manage the progress of the campaign.

   1. Select the Allow redirection to campaign supervisors checkbox.
   2. Use the Search field to select one or more supervisors to help with the campaign.
9. Select Next.
10. Set the schedule for the campaign.
    • Select Run immediately and set Duration to the number of days that you want the campaign to run.
    • Select Select a start date and set the start date and time. Set the Frequency to how often you want it to run, and set Duration to the number of days that you want the campaign to run.
    Note: Duration refers to the time that the reviewer has to approve or reject the entitlements.
11. Select Next.
12. Set reminders for the campaign and specify what actions to take when the campaign ends.
    1. Select the Send reminders to reviewers checkbox.
    2. Specify when to start sending daily reminders to the reviewers before the campaign ends.
    3. Select what action to take on unreviewed entitlements at the end of the campaign.

       Take no action

       This selection is set as the default action. The entitlement status remains unchanged. If the entitlement was previously approved for the user or group, it is still approved. If it was rejected, it remains rejected.

       Approve all

       This selection grants the entitlement to any unreviewed users and groups.

       Reject all

       This selection denies the entitlements to any unreviewed users and groups.

13. Select Schedule campaign.
    The campaign is added to the Certification campaigns page.