Module - Recertification
What do you need before you start
You need to have CzechIdM 9.7.0 (or higher) installed.
You need to be logged in as admin (or an identity with superAdminRole).
You need to enable the Recertification module.
Two new agendas were created under Roles main menu:
Recertification requests - contains created recertification requests.
Recertification - contains created recertification actions. It contains requests grouped by recertification action executed by bulk actions.
Dashboard
Dashboard with recertification requests was created - it shows unresolved requests, which can be approved by a logged user with appropriate rights. The table of recertification request is the same as above - the default filter shows the currently logged user and only unresolved requests. The dashboard is hidden when no requests are found.
Recertification requests
Request table:
On the recertification request detail there are following tabs:
with items - contains basic information about the request and items to approve.
with approvers - shows current available approvers by recertification type (contract managers or role guarantee defined by user or role).
with role requests - when assigned role represented by a recertification item is removed, the assigned role is removed by role request. You can see the state of this request.
Recertification actions
Contains requests grouped by recertification action executed by bulk actions.
Identity and role detail
Tab with recertified assigned roles was added to role and identity detail.
READ
permission for recertification items is needed. Transitive authorization evaluators (by recertification request and action) were prepared, see the security chapter.
Identity and role table
Bulk action for starting a recertification action is available on identity and role table.
Bulk action modal window
Recertification action name will be filled automatically by selected roles or identities (if more than 15 records is selected, the name will be truncated to prevent long names).
Recertification due date is required and prefilled by
configuration.