When a certification task is opened, you may be required to verify the access of each entitlement. This verification step is optional based on the configuration settings set in the certification definition. If verification is not required, then the initial summary view of the entitlements is skipped, and you are presented with the entitlement detail view.If verification is required, then a decision must be made on each of the entitlements. To do so:
In the Pending Certifications page, open the new or in-progress certification review task.
From the Actions menu, select any one of the following for each entitlement:
Claim: Select to restore an entitlement to your verification queue for certification. This might happen automatically, depending on the values in certification configuration. See "Configuring Certification Options in Identity System Administration" in Administering Oracle Identity Manager for information about the certification configuration options. However, even if each entitlement is claimed automatically, you are free to choose another action.
Revoke: Select if the entitlement is no longer appropriate. This action removes the entitlement from the certification process, and you will not approve or revoke assignments for this entitlement. To return an entitlement to your verification queue, select the entitlement name, and select Claim from the Actions menu.
Re-assign: Select to remove the entitlement from the current certification and create a new one with the selected entitlement. This action removes the selected entitlement(s) from the current certification, creates a new certification with the selected entitlement(s), and assigns the person you specify as the primary reviewer for that new certification.
Abstain: Select if the entitlement is not appropriate and you do not know who should be responsible for verifying the entitlement's assigned accounts. This action on the entitlement records on each account assigns to the entitlement your decision to abstain, that is, to leave each assignment as it is. If you know who should be responsible, then you can reassign the entitlement instead.
After you have taken a verification action on each entitlement, you must make certification decisions on each user account assigned to the entitlements you have claimed. You do not need to make any further certification decisions on an entitlement that you have revoked or reassigned or abstained. Normally, this means that you will open each entitlement and then review its user accounts, as described in "Reviewing the Entitlement Assignments". However, you may also choose to delegate one or more entitlements to another person, which allows that person to make certification decisions on the user accounts assigned to that entitlement. The following actions are available from the Actions menu:
Open: Select this action to review the details of each entitlement and to make certification decisions on the user accounts assigned to the entitlement. See "Reviewing the Entitlement Assignments".
Delegate: Select this action to allow another person to make decisions on the access privileges of each selected entitlement. This action will create a new delegated-review task that contains the selected entitlement(s) and will assign the task to the person you specify as delegate. Responsibility still remains with you, the primary reviewer.
Un-delegate: This action applies only to delegated entitlements. This action removes each selected entitlement from the delegated-review task and returns decision-making rights to you, the primary reviewer.
The Actions menu offers two additional convenience actions that are useful after you have made some certification decisions on the details of an entitlement. These actions affect the decisions on multiple details, that is, accesses of each selected entitlement:
Complete: Sets any missing decisions on account assignments to Certify.
Reset: Clears all decisions made on the entitlement including decisions on the entitlement's access.