Intelligent Automations
Accelerate Access Reviews by rejecting or approving results with specific attributes or with prior decision data.
Access Review Intelligence can reduce time on Access Reviews by automatically making decisions based on a filter criteria or previous result status. For example, an Automation can "Reject rows where identities have no recent activity" or "Approve any rows already approved in the last Certification." Automation runs use the most recent completed or expired Certification for the same Workflow to update matching results in the active Certification.
Two default Automations are enabled and optional for all Workflows.
“Approve previously approved and unchanged”
“Rejected previously rejected and unchanged”
Administrators can manage Automations and attach them to Workflows with the Automations API.
An Automation definition includes:
The criteria, such as “Row is unchanged from previous Certification and was previously approved”
The action, such as “Approve & Sign-off”
Whether it is available for all or some Workflows
Whether it runs by default
Apply an Automation
Operators can apply available Automations when creating a Certification. Automations can also run by default upon Certification creation.
Create a Workflow or choose an existing one on the Access Reviews page.
Start a Certification for the Workflow and select Run Intelligent Automations.
Enable the Automations to run from the dropdown and create the Certification.
The available Automations will depend on the Automations assigned to the Workflow.
View completed Automations
Administrators and operators can review automated decisions by opening a Certification and checking the status bar above the results. A chart indicates the total action count.
Open the result actions dropdown and click View Action Log to see when an Automation occurred for a single result.
Assign Workflow Automations
Administrators can use Attach Automations and related API operations to manage Automation and Workflow assignments, and set whether they run by default or on an opt-in basis. An attachment operation assigns an Automation to a Workflow, or assigns all Automations to a Workflow.
Last updated
