Symantec IGA

  • 1.  RCM configuration continous update

    Posted Feb 16, 2018 04:57 AM

    I have created a custom task which helps users to request access to provisioning role. A policy xpress then assigns/revokes the roles after the request is approved.

     

    My question is this Modify user event  will the update be sent to the RCM when we have setup the continous update setup or will it not send updates for this custom task?



  • 2.  Re: RCM configuration continous update
    Best Answer

    Posted Feb 16, 2018 11:04 AM

    Hi Dhawan,

     

     

    Yes, please see the documentation in this chapter Continuous Update - CA Identity Governance - 12.6.02CR1 - CA Technologies Documentation :

     

    To support integration, certain changes made in CA Identity Manager are queued up and passed to CA Identity Governance. This feature allows CA Identity Governance to make provisioning role suggestions and validate changes against compliance policies, based on current CA Identity Manager information, instead of waiting for another import from CA Identity Manager to update the CA Identity Governance data.

    When a user, role, or account change occurs, CA Identity Manager generates a notification and adds it to a queue. At specified intervals, CA Identity Manager creates an aggregate notification with all the information in the queue (up to the maximum batch size) and sends it to CA Identity Governance.

    CA Identity Manager continuously updates CA Identity Governance when the following events occur:

    • Creating, modifying, or deleting a user

    • Creating, modifying, or deleting provisioning roles

    • Adding an account template to a provisioning role

    • Creating, modifying, or deleting an account

    • Creating, modifying, or deleting an account template

    • Assigning an account to a resource or removing an account from a resource

    • Assigning an account template to a resource or removing an account template from a resource

    • Adding a provisioning role to a provisioning role (nested roles) or removing a provisioning role from a provisioning role

    Continuous updates occur automatically when an active connection to CA Identity Governance exists in an CA Identity Manager Environment.

     

    Hope this answers your question.

    Thanks,

    Einav



  • 3.  Re: RCM configuration continous update

    Posted Feb 16, 2018 11:06 AM

    Here's an additional link to a more recent version (14.0) which states the same, for your reference:

    Continuous Update - CA Identity Governance - 14.0 - CA Technologies Documentation