Creating a user recertification policy

As an administrator, you can create a user recertification policy to recertify the accounts, group membership of accounts, and memberships of users.

1. From the navigation tree, select Manage Policies > Manage Recertification Policies.
2. On the Recertification Policies page, in the Recertification Policies table, click Create.
3. On the Manage Recertification Policies page, on the General page, complete these steps:
   1. Type a name for the recertification policy.
   2. Optional: Type a description for the recertification policy.
   3. Select the status of the policy, enabled or disabled.
   4. Select the business unit to which the policy applies.
   5. Select the scope of the business unit that you selected.
   6. Click Next.
4. On the Target Type page, select Users, and then click Next.
5. On the User Target page, select the user type, and then click Next.
6. On the Resource Target page, complete these steps:
   1. Select which roles you want the policy to recertify membership on.
   2. Select which accounts you want the policy to recertify.
   3. Select which groups you want the policy to recertify.
   4. Click Next.
7. Optional: If you selected Specified roles on the Resource Target page, on the Role Target page, select one or more roles for which you want to recertify membership.
8. Optional: If you selected Accounts on specified services on the Resource Target page, on the Account Target page, select one or more services for which accounts on the service are recertified.
9. Optional: If you selected Specified groups on the Resource Target page, on the Group Target page, select one or more groups you want the policy to recertify.
10. On the Schedule page, select the schedule type and evaluation frequency, and then click Next.
11. On the Policy page, select the configuration mode, and then click Next. If you choose the advanced mode, use the workflow designer to configure the policy.
    Note: On the Policy page, you can also specify the following options:

    • Who approves recertification.
    • An action, such as Suspend accounts and mark others, that occurs when the recertification is rejected.
    • An optional recipient who receives the rejection email (which can be configured to None) such as a manager, who is notified when recertification is declined.
    • A value for the number of days in which the participant must respond to the request until the recertification is due.
    • An action, such as Reject All or Approve All, that occurs when the recertification is overdue. If you do not select an action, the recertification activity remains in the activity list of the participant after the due date until it is completed.
12. On the Recertification E-mail page, select an email template, and then click Next.
13. On the Rejection E-mail page, select a rejection email template, and then click Finish.
14. On the Success page, click Close.