User classes for segmented certification campaigns
When you set up an access certification campaign, the user population for a resource (application or group) can be too large for a single reviewer; nonetheless, access should be certified by those with knowledge of the resource, rather than by each user’s manager.
In this case, it is desirable to:
Enable multiple reviewers to certify different segments of a user population.
Ensure that every user is reviewed – that is, no uncertified users remain after certification campaigns are complete.
You can do this by segmenting users into personal user classes, and assigning reviewers according to class when you create a certification campaign. Any user can be assigned to certify a segment.
It is possible for a user class that contains no users to be included in a certification campaign. Reviewers can, in effect, be asked to certify that there are no users in a user class, or not included in a user class.
Relational user classes do not apply to access certification.