Changing a recertification policy

As an administrator, you can change a recertification policy. For example, you can modify the recertification interval, add or remove users, services, or access instances. Alternatively, you can modify the template that provides a message when recertification is declined.

Before you begin

Depending on how your system administrator customized your system, you might not have access to this task. To obtain access to this task or to have someone complete it for you, contact your system administrator.

About this task

If you modify a recertification policy, ensure that you consider the consequences of the changes. For example, when the schedule for recertification is modified, the changes might require users, accounts, or accesses that were recently recertified to be recertified again immediately. When setting the default timeout action, ensure that you properly set up the participant of recertification. An escalation participant is not specified in the default simple workflow.

Suppose that a recertification policy exists for LDAP accounts and the notifications for recertification are sent to all account owners. If the target for the recertification policy is changed from LDAP service to Win local service, the LDAP accounts still must be recertified by the LDAP account owners. Because the to-do activities for LDAP recertification are already created, the timeout action and the action upon rejection are applicable as specified in the LDAP recertification policy before updating. To-do items that are already in process are not deleted automatically, and progress to their natural ending.

You can use policy modification to disable a policy. If you disable a policy, the policy does not generate any additional recertification to-do items until it is re-enabled. However, any running recertifications are not stopped, and they complete as normal.

Procedure

  1. From the navigation tree, select Manage Policies > Manage Recertification Policies.
  2. On the Recertification Policies page, type information about the recertification policy or service in the Search information field, or type an asterisk (*). Select a filter in the Search by field, and then click Search.
  3. In the Recertification Policies table, locate and select a recertification policy that you want to change, and then click Change.
  4. On the Manage Recertification Policies page, modify the information on the available pages.
  5. Click OK to save the changes.
  6. On the Success page, click Close.