cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Automatic approvals in IdentityIQ

Automatic approvals in IdentityIQ

 

A new feature in IdentityIQ version 8.1 adds efficiency to access reviews by using IdentityAI's recommendation engine to let you automatically approve access based on recommendations. With this feature enabled, any access review item that has a recommendation of "thumbs up" is automatically moved from the reviewer's Open tab to the Review tab, with an "Approved" decision. Reviewers retain the option of changing the automated decision, as needed, before signing off on the review. Automated approvals help your reviewers process access reviews quickly and more efficiently by taking easy decisions out of the way so that they can focus on exceptional items.

The automated approvals feature requires that you have implemented IdentityIQ's IdentityAI recommendation engine.

 

Enabling automated approvals

Any IdentityIQ system that has the IdentityAI recommendation engine implemented can enable automated approvals both globally, and at the individual certification level.

 

Setting a global default

To enable automated approvals as the global default:

  1. Click gear menu > Compliance Manager
  2. In the Decisions section, check the box by Show Recommendations to enable it
  3. Check the box by Automatically Approve Recommended Items to enable automatic approvals
  4. Save your changes

CompMgrGlobalApproveSetting.png

 

Enabling automatic approvals in individual certifications

You can use automated approvals in these types of certification:

  • Targeted
  • Manager
  • Application Owner
  • Advanced
  • Role Membership

Important: Exercise caution when staging certifications that have automatic approvals enabled. If you include a staging period with a certification that has automatic approvals enabled, then later disable either recommendations or automatic approvals, items that were flagged for automatic approval during staging will lose the starred automatically-approved icon, but will remain approved and will still show initially on the reviewer's Review tab rather than the Open tab.

To enable automated approvals in Targeted Certifications:

  1. Click Setup > Certifications
  2. Click New Certification > Targeted
  3. In the Additional Settings section, click Advanced Options
  4. Select both the Show Recommendations and Automatically Approve Recommended Items boxes
  5. Set the rest of your certification parameters as needed, and schedule the certification

TargetedCertRecomm.png

 

To enable automated approvals in all other supported certification types:

  1. Click Setup > Certifications
  2. Click New Certification and choose one of the certification types that supports automatic approvals (Manager, Advanced, Role Membership, or Application Owner)
  3. On the Behavior tab, select both the Show Recommendations and Automatically Approve Recommended Items boxes
  4. Set the rest of your certification parameters as needed, and schedule the certification

ManagerCertAutoApprove.png

 

How automatic approvals work

The icon for Auto Approved Recommendations is the standard "thumbs up" icon, with a star.

AutoApprovalsGeneralInfo.png

Any access review item that has a recommendation of "thumbs up" is automatically moved from the reviewer's Open tab to the Review tab, with an "Approved" decision.

 

AIAutoApprovedItems.png

Reviewers retain the option of changing the automated decision, as needed, before signing off on the review.

Users still have to sign off on automatically approved items in the Review tab. If the user reverses an automatic approval, the item is moved back to the user's Open tab for further review as needed.

 

Finding automatically approved items

For quick viewing of all automatically approved items, users can Filter the items in their Access Review.

To filter on automatically approved items:

  1. In the Access Review UI, click Filter
  2. Click Add Filter and select Auto Approved

    FilterAutoApproved.png

     










  3. Choose a value (True or False) for filtering
  4. Click Apply

 

Reporting on automatic approvals

You can include automated approval information in reports, to help track and monitor items that have been automatically approved.

To report on automatically-approved items:

  1. Click Intelligence > Reports
  2. From the Access Reviews and Certifications reports section, choose a "live report" option for one of the certification types (Manager, Targeted, Application Owner,  Advanced, or Role Membership) that supports automatic approvals.
  3. In the Report Layout section, choose the columns related to automatic approvals that you want to display:

ReportLayoutForAutoStuff.png

Labels (1)
Comments

Nice article. Thx.

Version history
Revision #:
4 of 4
Last update:
‎May 09, 2023 08:17 PM
Updated by: