Mover Processing in Rapid Setup
The mover processing that can be configured at the application level consists of certifying the changes in access that can arise when an identity moves within your organization. There are other mover behaviors that can be configured globally in Mover Configuration. At the application level, some additional certification and account creation behavior can be defined.
Note: Joiner and leaver events take priority over mover events. If an identity is eligible for a joiner event or a leaver event, the mover event will not be launched.
Option |
Description |
Include Additional Entitlements in a Certification for This Application |
Enable this option if you want the certification to include entitlements that are not contained in a role. If certifications are not enabled globally for mover processing, this option is ignored. A message above the configuration options indicates when certifications are not globally enabled. |
Include Targeted Permissions in a Certification for This Application |
Enable this option if you want the certification to include the actions a user can perform on an Unstructured Target such as a file share or folder If certifications are not enabled globally for mover processing, this option is ignored. A message above the configuration options indicates when certifications are not globally enabled. |
Perform Account-Only Provisioning |
Create an account for the moving identity on this application, even if no entitlements exist for the account. |