Users Request and Provisioning

Question 1

What is #1 defining?

Quicklinks

Answer 1

Who can request for this Quicklink.

Creating a group of users for this quicklink.

Question 2

What is #2 defining?

Quicklinks

Answer 2

Which users can be targeted/request access for.

Creating a group of users for this quicklink.

Question 3

What is #3 defining?

Quicklinks

Answer 3

What can be requested (access).

Creating a group of users for this quicklink.

Question 4

What can you request with #1.

Answer 4

Add or remove roles/entitlements

Question 5

What can you request with #2.

Answer 5

Request, delete, modify accounts.

Question 6

What can you request with #3.

Answer 6

Changed passwords on managed systems or IdentityIQ

Question 7

Important note to know about access given in Quicklinks.

Answer 7

Access is cumulative

Question 8

List possible Provisioning Policies.

Answer 8

CUUPEDD
- Create
- Update
- Unlock
- Password
- Enable
- Delete
- Disable

Question 9

Where do you go to Configure Account Dependency

Answer 9

Navigate to Applications > Application Definition in the IdentityIQ UI.
Select the application for which you want to define dependencies.
Go to the Provisioning Policies tab.
Under Application Dependencies, specify the dependent applications and their required fields.

Question 10

Lifecycle Event possible Event Types

Answer 10

CRAMRAN
- Create
- Rule
- Attribute Change
- Manager
- Rapid Setup
- Alert
- Native Change

Question 11

List the IdentityIQ actions that can trigger provisioning

Answer 11

User Initiated Actions
System Initiated Actions
Lifecycle Event-Driven Provisioning

Question 12

List possible User Initiated Provisioning

Answer 12

CLAP
Certifications
Lifecycle Manager
Access Requests
Policy Violations

Question 13

List possible System Initiated Provisioning

Answer 13

BAIR
Background Reconciliation
Aggregation
Identity Refresh-Driven Assignments
Role Assignments

Question 14

List possible Lifecycle event initiated Provisioning

Answer 14

Joiner
Leaver
Manager Transfer
Reinstate

Question 15

What are Lifecycle Events?

Answer 15

Activities that happen in the normal course of a person’s employment
* Joining the company (joiners)
* Changing departments/managers (movers)
* Leaving the company (leavers)

Question 16

Describe the process of Attribute Synchroniztion

Answer 16

Attribute synchronization is an automated process of synchronizing changes to Identity Cube identity attributes (such as name, email, or department) from an authoritative source to target systems.

Question 17

Yes or No

Attribute Synchronization is Triggered by Aggregation

Answer 17

YES

Question 18

Yes or No

Attribute Synchronization is Triggered by editing identity in UI.

Answer 18

Yes

Direct Edit to an Identity or Aggregation (Synchronize Attributes refresh option)

Question 19

What can you create provisioning requests for in IdentityIQ?

Answer 19

Certifications,
Policy Violations,
Identity Refresh-Driven Assignments,
Lifecycle Manager Requests,
Lifecycle Event-Driven Provisioning

These actions represent different scenarios under which provisioning requests can be initiated.

Question 20

Fill in the blank: You can create provisioning requests in IdentityIQ using _______.

Answer 20

CLLIP
Certifications,
Lifecycle Manager Requests,
Lifecycle Event-Driven Provisioning,
Identity Refresh-Driven Assignments,
Policy Violations

Question 21

Yes or No

Identity Refresh-Driven Assignments can be used to create provisioning requests in IdentityIQ.

Answer 21

Yes

Question 22

Yes or No

Identity Refresh-Driven Assignments can be used to create provisioning requests in IdentityIQ.

Answer 22

Yes

Question 23

Yes or No

Manage Access can be used to create provisioning requests in IdentityIQ.

Answer 23

No

Question 24

Yes or No

Policy Violations can be used to create provisioning requests in IdentityIQ.

Answer 24

Yes

Question 25

# Yes or No Entitlements can be used to create provisioning requests in IdentityIQ.

Answer 25

No

Question 26

# Yes or No Provisioning request created by a Identity refresh creates a workflow case.

Answer 26

Yes

Question 27

# Yes or No Provisioning request created by a certification creates a workflow case.

Answer 27

No

Question 28

# Yes or No Provisioning request created by a Lifecycle Manager Request creates a workflow case.

Answer 28

Yes

Question 29

# Yes or No The owner on an Role is ususally the violation owner.

Answer 29

No | Manager is the correct answer

Question 30

# Yes or No Only the remediations of roles or entitlement Non-SOD Policy Violations generate a provisioning request to revoke invalid access.

Answer 30

No | Only SOD policy Violations

Question 31

# Yes or No You can create policy violation remediation requests from Lifecycle Manager

Answer 31

No

Question 32

# Yes or No You can create policy violation remediation requests from Policy owner's Policy Violation page

Answer 32

Yes

Question 33

# Yes or No You can create policy violation remediation requests from a certification

Answer 33

Yes

Question 34

# Yes or No You have to enable the following options in an Identity Refresh to generate a provisioning request for identities. External applicatons: Provision assignments

Answer 34

Yes

Question 35

# Yes or No You have to enable the following options in an Identity Refresh to generate a provisioning request for identities. Roles: Refresh assigned, detected roles and promote additional entitlements

Answer 35

Yes

Question 36

# Yes or No You have to enable the following options in an Identity Refresh to generate a provisioning request for identities. External applicatons: Refresh assigned, detected roles and promote additional entitlements

Answer 36

No | Not for External applications

Question 37

# Yes or No You have to enable the following options in an Identity Refresh to generate a provisioning request for identities. Roles: Provision assignments

Answer 37

No | Not for Roles

Question 38

# Yes or No You have to enable the following options in an Identity Refresh to generate a provisioning request for identities. Roles: Refresh identity entitlements for all links

Answer 38

No | This does not generate requests

Question 39

# Refresh assigned, detected roles and promote additional entitlements Generates provisioning requests to add entitlements required by the currently assigned roles.

Answer 39

Yes

Question 40

# Lifecycle Manager Requests In a typical configuration: Managers can make requests for their direct reports.

Answer 40

Yes

Question 41

# Lifecycle Manager Requests In a typical configuration: Managers can make requests for their direct reports.

Answer 41

Yes

Question 42

# Lifecycle Manager Requests In a typical configuration: Managers can make requests for their direct reports.

Answer 42

Yes

Question 43

# Yes or No Lifecycle Manager is a separately licensed portion of the IdentityIQ product.

Answer 43

Yes

Question 44

# Yes or No Manage Accounts is designed to manage entitlements using provisioning requests

Answer 44

No | Lifecycle Manager

Question 45

# Yes or No Use the Manage Accounts feature to: Unlock locked accounts

Answer 45

Yes

Question 46

# Yes or No Use the Manage Accounts feature to: Add the entitlement to the specified identity

Answer 46

No

Question 47

# Yes or No Use the Manage Accounts feature to: Enable disabled accounts

Answer 47

Yes

Question 48

# Yes or No Use the Manage Accounts feature to: Add the entitlement to the specified identity

Answer 48

No

Question 49

# Yes or No Use the Manage Accounts feature to: Request accounts on additional applications

Answer 49

Yes

Question 50

# Yes or No Use the Manage Accounts feature to: Revoke an identity's current entitlements.

Answer 50

No | Request Entitlements

Question 51

# Yes or No Use the Lifecycle Manager Request Access to: Revoke or disable existing accounts

Answer 51

No

Question 52

# Yes or No Use the Lifecycle Manager Request Access to: Request accounts on additional applications

Answer 52

No

Question 53

# Yes or No Use the Lifecycle Manager Request Access to: Provision the entitlements the role requires

Answer 53

Yes

Question 54

# Yes or No Use the Lifecycle Manager Request Entitlements to: Add the entitlement to the specified identity

Answer 54

Yes

Question 55

# Yes or No Use the Lifecycle Manager Request Entitlements to: Revoke an identity's current entitlements

Answer 55

Yes

Question 56

# Yes or No Use the Lifecycle Manager Request Entitlements to: Provision the entitlements the role requires.

Answer 56

No | Request Access

Question 57

# Yes or No Use the Lifecycle Manager Request Entitlements to: Deprovision by removing roles from an identity

Answer 57

No | Request Access

Question 58

# Yes or No Use the Lifecycle Manager: Create Identity

Answer 58

Yes

Question 59

# Yes or No Use the Lifecycle Manager: Manage Passwords

Answer 59

Yes | resets passwords on target systems which involves a provisioning plan an

Question 60

# Yes or No With Lifecycle Manager enabled, Lifecycle Events can be configured in IdentityIQ to represent activities that occur during the normal course of a person's employment at a company.

Answer 60

Yes

Question 61

# Yes or No One of the four predefined Lifecycle Events: Joiner

Answer 61

Yes

Question 62

# Yes or No One of the four predefined Lifecycle Events: Mover

Answer 62

No | They call it Manager Transfer

Question 63

# Yes or No One of the four predefined Lifecycle Events: Reinstate

Answer 63

Yes

Question 64

# Yes or No One of the four predefined Lifecycle Events: Manager Transfer

Answer 64

Yes

Question 65

# Yes or No Specific changes to an identity that will trigger Lifecycle Event: Attribute change

Answer 65

Yes

Question 66

# Yes or No Specific changes to an identity that will trigger Lifecycle Event: Identity Trigger rule

Answer 66

Yes

Question 67

# Yes or No The four predefined Lifecycle Events are enabled by default.

Answer 67

No

Question 68

# Yes or No Default action of of Lifecycle event - Joiner is to create account

Answer 68

No | Prints to sysout, no actions are taken

Question 69

# Yes or No Default action of of Lifecycle event - Reinstate is to create account

Answer 69

No | Reinstate is a rehire. ## Footnote Enables all previously disabled accounts of returning identity

Question 70

# Yes or No Default action of of Lifecycle event - Leaver creates and runs provisioning plan to disable all accounts.

Answer 70

Yes

Question 71

# Yes or No Only mangers and administrators can edit the Identity cube information

Answer 71

No | Only Administrators

Question 72

# Yes or No Identities Warehouse: A provisioning plan is generated that updates an identity when you: **Change capabilities or assigned scopes on the User Rights tab**

Answer 72

Yes

Question 73

# Yes or No Identities Warehouse: A provisioning plan is generated that updates an identity when you: **Delete or Move account links from the Application Accounts tab.**

Answer 73

Yes

Question 74

# Yes or No Identities Warehouse: A provisioning plan is generated that updates an identity when you: **Add identity to workgroup**

Answer 74

No | Not an option in Identities Warehouse

Question 75

# Yes or No If the triggering attributes for the identity have not changed, deleted roles that were assigned by rules are automatically reassigned to the identity during the next identity refresh.

Answer 75

Yes

Question 76

# Yes or No By default, cache updates are performed every 5 minutes

Answer 76

No

Question 77

# Yes or No By default, cache updates are performed every 10 minutes

Answer 77

Yes

Question 78

# Yes or No When an identity’s access to a system is determined to be inappropriate for their job function, the certifier can revoke the entitlement through the Certification Access Review. This process is called Certificate Remediation.

Answer 78

Yes

Question 79

# Yes or No When an identity’s access to a system is determined to be inappropriate for their job function, the certifier can revoke the entitlement through the Certification Access Review. This process is called Certificate Rejection.

Answer 79

No

Question 80

# Yes or No You have to edit the xml for any policy to include remediated as one of its certificationActions values.

Answer 80

Yes

Question 81

# Yes or No You have select remedication in the cerification settings GUI for any policy to include remediated as one of its Certification Actions values.

Answer 81

No | XML must be edit. No GUI interface