Access Certification Campaign Templates

Access Certifications campaign templates allow Compliance Managers and Administrators to more easily organize and schedule reoccurring campaigns to help meet organizational goals as well as any compliance needs. When a campaign template is scheduled, it will initialize a campaign at the scheduled times which can be located in the Campaign Management screen. This allows for the automation of campaign creation and initialization based on the reoccurring schedule.

The following are common uses for campaign templates:

• Regularly occurring access certifications of data assets
• Semi-annual or annual audit requirements
• Initialize an ad hoc campaign from a pre-configured template

Ad hoc campaigns can also be created directly within the Campaign Management screen using the Create New button.

Managing Campaign Templates

Campaign templates can be viewed, edited, duplicated, deleted, or scheduled by going to Compliance > Campaign Templates.

All campaign templates are listed along with details about each one. These details include who owns the campaign, the type of campaign it is, and information about its schedule if one has been established.

There are multiple ways to search for a particular template. You can use the predefined filter option (All, Permissions, Identities) which filters between the campaign type, search for templates by using the search bar, or use the filter icon to search for a template based on the owner or the schedule frequency. You can also sort templates alphabetically or by the next run time.

Note

When using the search bar to locate a template, Enter has to be selected to perform the search.

Depending on your user level (Administrator or Compliance Manager), each template has the following options:

• Edit – Opens an editing page where edits to the template can be made.
• Duplicate – Duplicates the template and allows parameters to be edited with information prepopulated from the duplicate template.
• Delete – Deletes the template. The deleted template is no longer displayed. Any campaigns generated from campaign templates will not be deleted or negatively impacted when deleting the campaign template.
• Use this Template – A new tab opens in the Create Campaign screen with predefined data from the template. Here you can review, save, and/or run a new campaign.
• Schedule – Schedules a template to run as often or as little as needed. A campaign will be created and initiated automatically at scheduled times. You can find the scheduled campaign in the Campaign Management screen. The new campaign will be named the same as the template with a timestamp added to the title of when the campaign was intialized. This can be edited after creation.

Creating an Access Certification Template

To create a new access certification template, go to Compliance > Access Certification > Campaign Templates and select Create Template.

When creating a new template, you need to provide details about the desired template.

General Details

1. On the first step of the campaign creation, provide the following information:

   • Template Name - Required. Name of the template.
   • Template Description - Details about the template.

   • Campaign Type - Choose either Permissions or Identities.

     Note

     The type of campaign that is chosen will determine what filters are displayed in the filter dropdown list. Only filters meeting the selected campaign type will be displayed.

   • Instructions for Reviewers - Review the pre-populated text and adjust as needed.

   • Duration - Required. Choose how long the campaign should run for when initiated from the template.

2. Select Next.

Filter Selection

The filter selection is the main component of a campaign. It defines what populates in the campaign to be certified.

1. On the filter selection step, define a scope for the campaign. This can be done by selecting an already saved or shared filter from the dropdown. Or, select the Forensics link to be taken to the Forensics page to create a new filter.

   Note

   If creating a new Permissions or Identities filter from the Forensics page, select Refresh on the Filters page and the newly created filter will display as an option.

   If choosing an already created filter from the dropdown, the filter and its parameters display.

   Tip

   If a resource or application is ever deleted using the selected filter, a new filter will need to be created since the selected one will be invalid.

2. Select Next.

Review Process

On the review process step, set the appropriate reviewers for the certification template.

In the Reviewer Process dropdown, select either Data Owner, By Selected Reviewer(s), or By Manager/Entitlement Owner. The review type options will depend on what type of campaign this is.

Note

The By Data Owner review type is only available with permission type campaigns. If By Data Owner is selected, the user also needs to select a default reviewer. The default reviewer will review the records in case the review cannot be assigned to the owner.

If By Manager/Entitlement Owner is selected and the review record contains an identity, the review process is assigned to the identity's manager. If the manager is not available, the system checks to see if there is an entitlement owner. If there is no entitlement owner, the review is assigned to the selected default reviewer.

A campaign is created for each manager or data owner associated with all items from the campaign.

Select Next.

Schedule

Running a certification template on a schedule is enabled by default and initiates a campaign at the scheduled intervals. To disable, toggle Enable Schedule.

1. Select a scheduling frequency from the dropdown list.
2. Select the interval frequency of the schedule. For example, if you previously selected "monthly" and then select an interval of "2" the schedule will run every other month.
3. Using the hour and minute options, select the time of day the corresponding campaign is initialized. Specify AM or PM by selecting the button.
4. Specify a start date using the calendar icon. The schedule frequency starts after the selected start date.
5. If the schedule should have an end date, toggle the Never to display the end date calendar option.
6. Select Next.

Summary

On the Summary page the Invitation toggle is on by default. This will activate sending invitations when the campaigns created from the template are initialized. Invitations cannot be edited.

You can also send out a reminder about the campaign. The reminder option is on by default but can be turned off. Reminders cannot be edited. They are sent out weekly on Mondays at 5:00 UTC for the duration of the campaign once initialized.

Lastly, review all the certification settings you have chosen.

Creating a Template from the Campaign Management Screen

If a campaign exists that you want to use as a template, go to Compliance > Access Certification > Campaign Management.

Locate the desired campaign within the Actions column and select Save as Template.

After selecting Save as Template, the template wizard displays with campaign details prepopulated starting at the General Details page.

All steps outlined above are the same for this process.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.