Skip to main content

Entitlements certification coverage

Purpose: Reports on which users and entitlements have been reviewed.

Executable: certcoverage

Table 1. Entitlements certification coverage report search criteria

Criteria

Description

Entitlement type

Select the type of entitlement being reviewed:

  • Profile

  • Account

  • Managed group

  • Role

  • Approved exception to segregation of duties rules

    Each of these options can be included in a certification campaign.

Target system ID

Type or for The ID of the target system to which an account or managed group belongs. This option is only displayed if Account or Managed group is selected for entitlement type.

Managed groups

If you selected this entitlement type, type or search for the groups to include in the report.

Roles

If you selected this entitlement type, type a comma-and-space-delimited list of roles to include in the report. Alternatively, you can search for one or more roles.

Segregation of duties rules

If you selected this entitlement type, select the rules to include in the report. Only valid rules are displayed.

Certification start

Define a date range that the campaign was initiated.

Certification end

This is the date that the campaign was signed off.

Options

Select options to include in the report:

  • Reviewed : Show users who were certified and signed off.

  • Not reviewed : Show users who were not signed off yet.

  • Entitlements (reviewed for all) : Show entitlements that were certified for all assigned users; that is, the assignment of entitlement was reviewed in relation to all user profiles who had the entitlement. This option is selectable for all types other than profile.

  • Entitlements (reviewed for some) : Show entitlements that were certified for some assigned users; that is, the assignment of the entitlement was reviewed in relation to at least some user profiles. This option is selectable for all types other than profile.

  • Entitlements (unreviewed for all) : Show entitlements that were not certified at all; that is, the assignment of the entitlement was not reviewed at all. This option is selectable for all types other than profile.

Show orphan accounts

Check to show user name and user ID for orphan accounts. This option is only available if Account or Managed group is selected.

Show child groups

Check to show child groups. This option is only available if Managed group is selected.

Show most recent certifications

Check to show only the most recent certification for the entitlements. This option is only available if Reviewed is selected.

Show unreviewed details

Check to list unreviewed entitlements instead of just showing a summary. This option is only available if Entitlements (reviewed for some) or Entitlements (unreviewed for all) is selected.