Query subjects for Recertification Audit namespace

Edit online

The following table lists the query subjects in the Recertification Audit namespace.

Table 1. Query subjects in the Recertification Audit namespace for the recertification model
Query subject Description
User Recertification Policy Represents the recertification policy that recertifies accounts, group memberships, and roles memberships through user recertification. IBM Security Identity Manager entities are recertified with the recertification policy. You must use this query subject with the User Recert History query subject to obtain information about the recertification policy. Do not use this query subject with Account Recert History and Access Recert History.
User Recert History Represents the recertification audit history for a user. It covers recertification audit history of accounts, groups, and roles that are associated with the user.
Person Represents a user entity and some of its configuration attributes. You must use this query subject with the User Recert History query subject to obtain information about the user that is being recertified.
Person Organization Represents an organization that is associated with a user. These users are being recertified.
User Recert Account Represents the recertification audit history for an account that is recertified as part of the user recertification. You must use this query subject with the User Recert History. By doing so, you can obtain the information about accounts that are associated with the users that are being recertified.
User Recert Group Represents the recertification audit history for a group membership that is recertified as part of the user recertification. You must use this query subject with the User Recert History. By doing so, you can obtain the information about memberships of the accounts that are associated with the users that are being recertified.
User Recert Group Service Represents the service that is associated to a group. You must use this query subject with the User Recert History to obtain more information about the service for the groups that are recertified as a part of the user recertification.
User Recert Role Represents the recertification audit history for a role membership that is recertified as part of the user recertification. You must use this query subject with the User Recert History. By doing so, you can obtain the information about role memberships of the users that are being recertified.
Account Represents an account entity and some of its configuration attributes. You must use this query subject with the Account Recert History query subject. By doing so, you can generate recertification history reports of accounts.
Account Service Represents service that is associated to an account. These accounts participate in the account and access recertification.
Account Owner Represents user owners of the accounts that are participating in the account and access recertification.
Account Recert History Represents the recertification audit history for accounts. You must use this query subject with the Account query subjects. By doing so, you can find out the accounts in the recertification audit.
Access Represents the group access and some of its configuration attributes. You must use this query subject with the Access Recert History query subject to generate recertification history reports of access.
Access Recert History Represents the recertification audit history for access. You must use this query subject with the Access query subjects. By doing so, you can find out the accesses in the recertification audit.