IBM Security Verify

 View Only

Access Certification Campaign Customizations (UI) in IGI 5.2.4.

By Ramakrishna Gorthi posted Wed April 08, 2020 10:16 AM

  

IAM.jpg
Authors – Ramakrishna J Gorthi (rjgorthi@in.ibm.com) & Vaibhav V Gadge (vaigadge@in.ibm.com)

Identity Governance and Intelligence (IGI) allows enterprises to provision, audit and report user access and his activities through life cycle, compliance and analytics capabilities. While one of the core functions of IGI revolves around Access Certification / Continued Business Need, there is a more specific requirement of customizing different artefacts of the campaign.

Some enterprises need to configure the layout of the different columns in the Access Certifier Grid. Some enterprises need to configure the visibility of specific columns in the campaign. Some enterprises want the control to be given to the end-users to customize the layout & visibility of specific columns in the grid. There are few enterprises who want to go as far as customizing the individual column headers shown up in the Campaigns.

Once, the campaign is launched, the primary users responsible for completing different activities of the campaign are not necessarily technical users. They would ideally like to have a simplified and “to the point” UI to get their work done swiftly. With the right balance of customization, reviewers can understand the semantics better, they can take faster action to approve / revoke accesses, thereby completing their access certification campaigns faster. That’s one of the main drivers for UI Customizations.

Here are some guidelines on how the different artefacts could be customized: 

1) Customization Enforced by Administrators across all Reviewers and Supervisors:

At the time of creating / configuring campaign details, the administrators can pick and choose the list of attributes to exposed in that specific campaign alongside the layout of the columns in the Grid. He typically does this on a per campaign basis, as shown in Figure 1 below.

Figure 1. Administrator can control the Layout and Visibility of AC Grids.

 

As can be noted in the above figure, the customization for the admin persona is possible for both User and Entitlement View.

Whatever layout  is configured here, serves as the master configuration for all reviewers and supervisor who get attached with this campaign.

2) Customization Overridden by a given Reviewer OR Supervisor:


Conventionally, User will open campaigns in either User View or Entitlement View and review pending certifications against list of users covered in campaign in Tabular format. Usually each row has plenty of details for like User’s name, OU name, application name, entitlement name etc. Though admin has exposed a set of columns as a default configuration, not all the details may be relevant to each user and for each organization.

Starting IGI 524, column selector capabilities are introduced in the Access Certifier Panels, that allows user to personalize their AC Campaign detail panel, in such a way that the changes are persisted and would reflect everytime the same user logs into the Service Center and launches the same configuration.

The column selector shows up on the top right of Table, as highlighted in Figure 2 below.

 Figure 2 Column Selector for reviewer / supervisor to customize column layout and visibility.

 

After clicking “Column Selector” icon, a panel (As shown in Figure 3 below) would appear showing all columns available for layout customization.

In this panel, a user should be able to do the following:

  1. Select column names to make them visible in table.
  2. Deselect the columns to hide them in grid.
  3. Drag and drop up or down to define the order of columns in table.
  4. Save the selection by clicking “Apply” button.
  5. Click the reset button to go back to original default selection (defined by admin). Previously saved order/selection will be discarded.

Figure 3. Column Customization


Once new selections are done and saved, campaign table is re-rendered as per new selection.

Note: Column customization changes are unique to each user and the Campaign.

3) Column Header Customization of Access Certification Campaign Tables

Another aspect of UI customization, that’s dear to many enterprises, revolves around customizing Column Headers. As explained earlier, if enterprises want to change labels of Columns of AC Campaign details Panel, they can follow the steps put below. The user needs admin access of IGI Virtual Appliance Admin Console, to perform these steps.

Step 1: Identify the current label which needs to be changed for given column in the Campaign details table. As per Figure 2, let’s say, user wants to rename label from “Last Name” to “Surname” in User View.

Step 2: Administrator logs into Virtual Appliance Admin Console and launches Custom File Management, as shows in Figure 4 below.

Figure 4 – Custom File Management.

 
Step 3: Download CustomAccessCertificationMessages.properties file as given in the location from path showed in Figure 5. Highlighted file is default english but admin may modify all relevant locale files to apply change in multiple languages.

Figure 5 – Spot for updating CustomAccessCertificationMessages.properties.


Step 4: Identify the label to be changed in this Properties file. It’s easy to understand the structure of this file. Key values are distributed based on where they appear on User Interface panel on Access Certification screen. Since, in Step 1, the intent was to customize “Last Name” in User View, lookout for this key-value in the properties file ike this under #User View section..

 
#User Assignment Campaign: User View

table.header.user.column.CODE=Master UID

table.header.user.column.NAME=First Name

table.header.user.column.SURNAME=Last Name

 

Step 5: Change this value to the desired value like “Surname”.

table.header.user.column.SURNAME=Surname

Step 6: Upload the file again at the same location and restart the server. Changes should be reflected. This way, one can change any column header of the Campaign detail table appearing in AC Panel:

Figure 6 – New label reflecting in the campaign view now.

 

Note that the label changes can be done either globally for all campaigns OR individually for specific campaigns.

A word of caution would be to not tamper with any of the default keys to avoid unexpected behaviour in the UI.


0 comments
15 views

Permalink