Based on their business needs, authorized administrators can configure analytics, customize decision support visibility and role mining detection, create custom metrics, run metric calculations on demand, and download and import custom metrics in order to optimize your governance system.
To configure analytics and role mining settings:
Log in as a Customer Administrator or Business Roles Administrator.
NOTE:A Business Roles Administrator does not have the same access permissions as a Customer or Data Administrator, and can only configure role mining settings and collect business role mining metrics.
Select Configuration > Analytics and Role Mining Settings.
(Optional) Under Decision Support, specify if the following information is excluded or included in the guidance provided to reviewers, review owners, review administrators, and access approvers.
Deselect Show business role authorization status if business roles are not used or if the reviewer or access request approver does not need guidance about whether the review or request item was authorized by a business role.
Deselect Show similarity statistics in reviews and access requests if the reviewer of user reviews or access request approver does not need guidance about how many users have similar permissions.
Deselect Show login statistics for review item users and accounts if Last Login and Number of Logins attributes are not configured/collected/logged for the users and accounts.
Deselect Show review list statistics if the review related authorized user wants to hide the review item’s prior completion details, such as date of completion, name of the review run that included the review item, and decision made about the review item.
(Optional) Under Similarity Profile, select additional attributes to use in the similarity profile so that Identity Governance can provide decision support.
HINT:Use wildcard * to search for attributes.
Under Role Mining:
Specify the maximum number of results that should be returned when mining business roles using the directed role mining approach.
Specify which additional user attributes should be used for both directed and visual business role mining. For more information about which attributes to select, see Understanding Role Mining Settings.
Specify the number of hours to retain the mining suggestions before they are deleted.
Select Save to save all the settings.
(Optional) Next to Metrics Collection, click the + icon to create custom metrics. For more information, see Section 30.1.2, Understanding Metrics and Creating Custom Metrics.
Under Metrics Collection, select one or more items, and then specify Actions > Set collection interval to change the default setting of 24 hours between metrics collections or disable collection.
HINT:Click on an item name to view detailed information about the metric, including list of metric columns’ aliases and corresponding data types.
Specify start date, time, and hours or deselect the Active check box to disable collection.
Click Save.
(Optional) Select one or more items and then select Actions > Collect metrics to initiate a metrics collection on demand.
HINT:Always collect metrics after a collection and publication to refresh charts on the Governance Overview dashboard and after modifying role mining settings to refresh business role mining related metrics.
(Optional) When a custom metric collection is running and you want to cancel it:
Select the item or items with an asterisk (*), and then select Cancel Collection
Click Cancel Collection to confirm the cancellation.
(Optional) Select one or more default and custom metric items and then select Actions > Download Metrics to download the metric results in CSV format.
NOTE:In addition to downloading the results, you can also download custom metric definitions and import them. For more information, see Downloading and Importing Custom Metrics Definitions.