User Recertification Details
You can recertify the roles, accounts, and groups of a user.
- Request number
- Displays the number of the request.
- Requested by
- Displays the user who submitted the request.
- Assigned to
- Displays who the request is assigned to.
- Submitted on
- Displays the date and time when the request was submitted.
- Due Date
- Displays the date and time by which the activity must be completed. An activity that passes this date either forwards to a defined escalation participant if one exists, ends automatically, or remains available as an overdue activity item.
- Instructions
- Displays detailed instructions for the activity.
- View request
- URL the user can view the request.
- Activity
- Displays the type of activity.
- Date submitted
- Displays the date and time the request was submitted.
- Request type
- Specifies the type of request.
- Requested for
- Displays the full name of the user for whom the activity is being requested.
- Requested by
- Displays the full name of the user who submitted the request.
- Due date
- Identifies the date and time by which you must complete the activity. An activity that passes this date either forwards to a defined escalation participant, ends automatically, or remains available as an overdue activity.
- Reviewer Action
- Recertify roles, accounts, and groups that include access items. The area displays two subsections such as a list of roles and a list of account and group items that are associated with the user.
- Roles
- List the roles. This section might not be displayed depending on the configuration of the user
recertification policy and whether the user has any roles.
- Roles
- Identifies the name of the role.
- Description
- Provide additional information about the role if it exists.
- Still Required
- Select whether the user needs one or more roles.
If the user still requires the role, select Yes to recertify the role. If the user no requires the role, select No to reject the role.
- Accounts and Groups pane
- List the accounts and groups. The table might not display, for any of the following conditions:
- The configuration of the user recertification policy.
- The accounts and groups, if any, that are owned by the user.
A group that is defined as an access item is displayed with the access name and description rather than the group name and description. Required groups and some auto-provisioned accounts are not displayed.- Accounts and Groups
- Identifies the accounts and any groups that are associated with each account. Accounts are identified by using the user ID and the name of the service on which they reside.
- Description
- Provides additional information about the account or group.
- Still Required
- Specify whether the user needs one or more accounts and groups.
- If the user still requires the account or group, select Yes to recertify the account or group.
- If the user no longer requires the account or group, and to reject the account or group, select No.
Note: If groups on the accounts require recertification, some accounts might be displayed for informational purposes. The accounts that are required are not included in the recertification. - Preview the impact of your selections
- Preview the results of your selections on the roles, accounts, and groups of the user that is being recertified. Affected items can include roles, accounts, and groups that are not included in the recertification activity. For example, when you select a role as not required, it might affect accounts and groups that are owned by the user. It might also affect accounts and groups that are owned by the user but are not part of the recertification activity.
- Justification
- Specify a reason for the action.
To complete the activity, click Submit.
To return to the Approve and Review Requests page and cancel your action, click Cancel.