CA Identity Manager Implementation Guide - CA Technologies

Complying with Business PoliciesCA Identity Manager performs two types of policy validations:– ComplianceProposed changes are validated against the CA RCM role model tosee if they violate explicit, predefined business policy rules in CARCM.– PatternProposed changes are compared to the CA RCM role model to see ifthey cause the subject of the change to become "out of pattern." CAIdentity Manager also makes sure that the changes do notsignificantly alter an established pattern in the role model.You can configure CA Identity Manager to perform these validationsautomatically when users perform certain tasks, or allow users toinitiate the validation manually.You can implement Smart Provisioning in an Identity Manager Environmentonce there is an established role model, based on Identity Manager data, inCA RCM.Note: For more information, see the Administration Guide.■Identity policiesYou can create a compliance policy, a type of identity policy (see page 21),which prohibits users from having certain privileges if they have otherprivileges. For example, you can prohibit users who can approve checks fromissuing checks.Compliance policies enforce a segregation of duties in your environment.■Compliance reportsCA Identity Manager includes sample reports that display the compliancestatus for users in your environment. Using these reports, you can see whichusers are not compliant with your business policies.Compliance ReportsCA Identity Manager includes the sample reports in the following table that youcan use to monitor compliance with corporate business policies.ReportRole MembersDescriptionDisplays the roles in the report database and liststhe members of those rolesChapter 2: Addressing Business Needs 23