Admin User Tasks
The Admin user functionality is similar to that of a system administration superuser. Admin users have the access rights to company-wide entitlement data on the Autonomous Identity console. Admin users can approve or revoke a user's entitlement.
A Tour of the Company Overview Page
The Company Overview displays a dashboard with a complete summary of all entitlements, confidence scores, the most critical entitlements plus other useful data in your network. Only users with Admin User and Executive User access can view this page.
The Company Overview is partitioned into several modules as you scroll down:
Search function. Provides a way to search on the Autonomous Identity system for any supervisor, entitlement owner, user, and entitlement within your company.
Model Coverage. Displays data on model coverage and confidence scoring of the assigned entitlements. The section summarizes the total number of entitlements processed by Autonomous Identity, and the number and percentage of those entitlements that were covered and not covered by the system. The section also displays a summary of entitlement assignments, specifically the number of High Confidence Assignments (90% and above), Low Confidence Assignments (20% and below), total assignments, and number of unscored entitlements. "Unscored" indicates that Autonomous Identity could not learn any patterns for a specific entitlement to properly assign a confidence score to it.
Confidence Score Distribution of Entitlements. Displays a histogram of the distribution of confidence scores across your entitlements landscape. The chart provides a good summary of the current state of your entitlements landscape. In general, you want to set up your high confidence-scoring entitlements as candidates for automated approval and certification. You also want to move a good percentage of your middle level confidence scores to high confidence entitlements.
User Type. Displays a summary of users versus non-users covered by the system.
Most Critical Entitlements. Displays the list of the most critical entitlements with the low average confidence scores and the number of employees with the entitlement. You can drill down to view each entitlement, where you can approve or remove access to the entitlement for that user.
All Entitlements Distribution. Displays the number of orphaned accounts, one-to-one matching, and the highly assigned entitlements to displayed number of users.
Orphaned accounts refer to those accounts that have existing access privileges without a valid owner.
One-to-one matching indicates the number of entitlement assigned to one user only.
Highly Assigned indicates the number of entitlements assigned to users. These highly-assigned entitlements are good candidates for automated access approval or certification using policies or roles.
Graph of All Entitlements Distribution displays a chart of the number of entitlements versus the number of users. The number range on the left (e.g., 0-5) indicate the number of entitlements assigned. The number on the right indicates the actual number of users. Thus, in the image below, there is one user who has 0-5 assigned entitlements. In the second row from the bottom, there are 1064 users who have between 5-10 assigned entitlements. In the third row from the bottom, there are 1549 users who have between 10-100 assigned entitlements.
Entitlements Without Owners. Displays the number of entitlements without an owner. This indicates that no user is managing this entitlement.
Users Without Supervisors. Displays the number of users without a supervisor. This could indicate that a user was not properly set up or deprovisioned on your system.
History of Assignment Confidence Scores. Displays a history of assigned confidence scores (high, medium, and low) over the past year versus the number of assignments. This graph shows the confidence score trends over time and indicates how well you are managing your entitlements. In general, you want rising high and mid confidence scores and decreasing low score trends.
A Tour of the Entitlement Detail Page
The Entitlement Detail displays the key information about a specific entitlement that lets approve the entitlement for automated certification or approval.
The Entitlement Detail is partitioned into different screen elements:
Search. Search for any entitlement in the system.
Average Confidence Score, Distribution of Users, and Confidence Score Driving Factors. Displays the average confidence score for the entitlement and the distribution of of users who have the assigned entitlement. The confidence score driving factors are the key user attributes that lead to the confidence score.
Bar Chart of Average Confidence Scores. Displays the average confidence scores broken down by percentages versus the number of users. Click the bar to select the entitlement's justification on the right. Click Approve Justification to select entitlement for automated certification or approval.
Justifications. On the right, the page displays justifications for the percentage range of confidence scores in the graph. Click the right arrow to see the list of users who have the entitlement assigned to them.
Performing Admin Tasks
One important task that an administrator must perform is to examine all critical entitlements. Critical entitlements are assigned entitlements that have are highly-assigned but have a low confidence score associated with it. The Autonomous Identity console provides a means to examine these entitlements.
Follow these steps to evaluate the most critical entitlements list:
On the Company Overview page, scroll down to the Most Critical Entitlements section. This section displays the entitlements that have low confidence scores and a high number of employees who have this entitlement.
Click an entitlement to view its details.
On the Entitlements detail page, review the key metrics, and then look at the number next to the exclamation point. For example, you may see "3/43". This indicates that 3 out of 43 users that have the justification attributes have this entitlement, which may indicate an outlier.
Click the right arrow in one of the category ranges to view the users, and then click one of the users in the list.
On the User's Entitlements page, scroll down to review the Confidence Score Comparison table to see the differences between the user's attribute and the driving factor attributes.
On the User's Entitlements page, scroll down to review the Employees associated with this entitlement.
Click Approve Access or Revoke Access.
Follow these steps to check Non-Scored Users or Users with No Entitlements:
On the Search menu, select Supervisor, and enter a supervisor name.
On the Employee Overview page, click the exclamation point button with the associated number of unscored entitlements, and then click View All to view the list.
Click a user, and then view the Entitlement assigned to the user.
In the search menu, select Entitlement, and then enter the specific entitlement to view its details.
Follow these steps to investigate a confidence score and approve or revoke access:
On the Employee Overview page, view the average confidence score graph by hovering over a confidence score.
Click a circle, and then click the user in the list on the right.
On the User Detail page, click a confidence circle on the graph to highlight the entitlement below.
Click Approve Access or Revoke access. If you want to drill down for information on the specific entitlement, click the entitlement, and then click Approve Access or Revoke Access.
Follow these steps to apply filters to your confidence score graphs:
On the Employee Overview page, view the average confidence score graph.
On the right, enable Remove High Scores from Average or enable any filter in the Application Filters section.
To add a filter, click a category, and then click Add Filter.
Follow these steps to approve a confidence score justification:
On the Company Overview page or the Employee Overview page, select Entitlement on the drop-down menu, and then enter the name of the entitlement.
View the average confidence score and hover over the Confidence score driving factors for a quick review.
On the Average Confidence Score graph, click the green percentage range bar.
Click the right arrow to view the list of selected users who have the entitlement assigned to them. Click each user link to review the user's entitlements.
Click Approve Justification, and then select Auto Certify or Auto Request, and enter the reason for the justification. Click Yes to apply the justifications.