Stage 3: Processing a Submitted Attestation Task

Managing Attestation Processes 19-11

19.1.9.1.2 Subject Line The following is the Subject line of e-mail messages defined by

the Notify Attestation Reviewer template: A new attestation task for attestation process Attestation Definition.Process Name has been added to your attestation inbox

19.1.9.1.3 Body The body of the e-mail message contains the following information:

The attestation task details are as follows Process Name: Attestation Definition.Process Name Process Code: Attestation Definition.Process Code Data Type: Access Rights Assigned Date: Attestation Task.Task Assigned Date

19.1.9.2 Notify Delegated Reviewers

This template is used to build the e-mail to send to a reviewer when an attestation task is delegated to the reviewer.

19.1.9.2.1 Variables The following are variables in the Notify Delegated Reviewers

template:

19.1.9.2.2 Subject Line The following is the Subject line of e-mail messages defined by

the Notify Delegated Reviewers template: Attestation Task.Delegated By User Id has delegated to you an attestation task from attestation process Attestation Definition.Process Name

19.1.9.2.3 Body The body of the message contains the following information:

The attestation task details are as follows Process Name: Attestation Definition.Process Name Process Code: Attestation Definition.Process Code Data Type: Access Rights Assigned Date: Attestation Task.Task Assigned Date Delegated By: Attestation Task.Delegated By First Name Attestation Task.Delegated By Last Name [Attestation Task.Delegated By User Id] Variable Description Attestation Definition.Process Name Name of the attestation process Attestation Definition.Process Code Code for the attestation process Attestation Task.Task Assigned Date Date the attestation task was assigned Variable Description Attestation Definition.Process Name Name of the attestation process Attestation Definition.Process Code Code for the attestation process Attestation Task.Task Assigned Date Date the attestation task is assigned Attestation Task.Delegated By First Name First name of the reviewer who performed the delegation Attestation Task.Delegated By Last Name Last name of the reviewer who performed the delegation Attestation Task.Delegated By User Id User ID of the reviewer who performed the delegation action 19-12 Oracle Fusion Middleware Users Guide for Oracle Identity Manager

19.1.9.3 Notify Process Owner About Declined Attestation Entitlements

The Notify Declined Attestation Entitlements template is used to build the e-mail to send to process owners notifying them of any declined entitlement attestations.

19.1.9.3.1 Variables The following are variables in the Notify Process Owner about

Declined Attestation Entitlements template:

19.1.9.3.2 Subject Line The following is the Subject line of e-mail messages defined by

the Notify Process Owner About Declined Attestation Entitlements template: User access rights in attestation request Attestation Request.Request Id have been declined by Attestation Task.Reviewer User Id

19.1.9.3.3 Body The following is displayed in the body of the message:

Attestation of the following user access rights were declined by the reviewer. Reviewer: Attestation Task.Reviewer First Name Attestation Task.Reviewer Last Name [Attestation Task.Reviewer User Id] Attestation Process: Attestation Definition.Process Name Attestation Request ID: request Attestation Request.Request Id Access Rights Data: Attestation Data.Provisioned User First Name Attestation Data.Provisioned User Last Name [Attestation Data.Provisioned User User Id] - Attestation Data.Resource Name - Attestation Data.Entitlement Descriptive Data

19.1.9.3.4 Special Comments Each entitlement data item will appear on a new line.

19.1.9.4 Notify Process Owner About Reviewers with No E-Mail Defined

The Attestation Reviewers With No Email Defined template is used to build the e-mail to send to process owners notifying them of reviewers for whom there is no e-mail address defined.

19.1.9.4.1 Variables The following are variables in the Notify Process Owner About

Reviewers with No Email Defined template: Variable Description Attestation Request.Request Id ID of the attestation request Attestation Definition.Process Name Name of the attestation process Attestation Task.Reviewer First Name First name of the reviewer Attestation Task.Reviewer Last Name Last name of the reviewer Attestation Task.Reviewer User Id User ID of the reviewer Attestation Data.Provisioned User First Name First name of the user being attested Attestation Data.Provisioned User Last Name Last name of the user being attested Attestation Data.Provisioned User Id User ID of the user being attested Attestation Data.Resource Name Name of the resource being attested Attestation Data.Entitlement Descriptive Data Descriptive data of the entitlement being attested Variable Description Attestation Request.Request Id ID of the attestation request Managing Attestation Processes 19-13

19.1.9.4.2 Subject Line The following is the Subject line for e-mail defined by the Notify

Process Owner About Reviewers with No Email Defined template: E-mail address is not defined for some of the reviewers in attestation process Attestation Definition.Process Name, request Attestation Request.Request Id

19.1.9.4.3 Body The following is the body of the message:

The following attestation reviewers do not have e-mail addresses defined. Attestation requests have been generated for these reviewers and can be accessed by logging in to Oracle Identity Manager. However, notification e-mails were not sent. Attestation process: Attestation Definition.Process Name Attestation Request ID: request Attestation Request.Request Id Request date: Attestation Request.Request Creation Date Reviewers Without Email: Attestation Task.Reviewer First Name Attestation Task.Reviewer Last Name [Attestation Task.Reviewer User Id]

19.1.9.4.4 Special Comments Each reviewer detail appears on a new line.

19.2 Attestation Process Configuration

A menu item in Oracle Identity Manager Administrative and User Console provides access to the Attestation Process Configuration pages. Oracle Identity Manager administrators can use these pages to: ■ Define new attestation processes. ■ Manage existing processes. ■ Initiate ad-hoc attestation processes.

19.2.1 Menu Structure

The top-level Attestation menu contains the following links in the Policies section of Oracle Identity Manager Advanced Administration: ■ Create Attestation Process ■ Manage Attestation Process These menu items are governed by the same delegated administration permissions that govern all menu items in the Advanced Administration. These menu items are defined but not assigned to any group in Oracle Identity Manager. They will be assigned to the System Administrators group in Oracle Identity Manager if audit compliance components are installed. Attestation Definition.Process Name Name of the attestation process Attestation Request.Request Creation Date Date when the attestation request was created Attestation Task.Reviewer First Name First name of the reviewer that is invalid Attestation Task.Reviewer Last Name Last name of the reviewer that is invalid Attestation Task.Reviewer User Id User ID of the reviewer that is invalid Variable Description