Mover Processing in Rapid Setup

The mover processing that can be configured at the application level consists of certifying the changes in access that can arise when an identity moves within your organization. There are other mover behaviors that can be configured globally in Mover Configuration. At the application level, some additional certification and account creation behavior can be defined.

Note: Joiner and leaver events take priority over mover events. If an identity is eligible for a joiner event or a leaver event, the mover event will not be launched.

Option

Description

Include Additional Entitlements in a Certification for This Application

Enable this option if you want the certification to include entitlements that are not contained in a role.

If certifications are not enabled globally for mover processing, this option is ignored. A message above the configuration options indicates when certifications are not globally enabled.

Include Targeted Permissions in a Certification for This Application

Enable this option if you want the certification to include the actions a user can perform on an Unstructured Target such as a file share or folder

If certifications are not enabled globally for mover processing, this option is ignored. A message above the configuration options indicates when certifications are not globally enabled.

Perform Account-Only Provisioning

Create an account for the moving identity on this application, even if no entitlements exist for the account.