Campaigns
7 article
About Campaigns
Last Updated: November 24, 2021SecurEnds runs access reviews off of Templates. A template defines the custom requirements for a campaign and can be re-used over and over again as a client plans out the various campaigns required. With templates, clients are able to select the types of users to be reviewed (Active or Inactive) within the System of Record, as well as, the applications to be included in the review. Access review requirements can be defined further but going down to the specific roles/credentials/entitlements within an application if needed. (Ex. Only review our Domain Admins for Application XYZ). Once templates are created, clients can use any of the templates to create User Access Review Campaign’s. A created Campaign will incorporate the requirements from the pre-built template along with a start and end date. Campaigns define the reviewers and users to be a part of the user access review. When a campaign is launched and email notifications configured, reviewers are able to approval or revoke credentials and entitlements. Campaigns should be reserved for only those users which need to be reviewed. If users need to be “excluded” from a campaign, that should be handled at the application level with the Bulk Exclude action. Subsequent syncs of the application will keep them excluded. Client can export that list for auditors in order to see who has been excluded from any application campaigns. The Excluded Users action within a campaign is an additional check to make sure no users were missed out. SecurEnds also provides End of Campaign notifications of all elections completed via email or submitted to various integrated ticketing systems. Click here to know more on Ticketing System Configuration.
Campaign Templates
Last Updated: September 30, 2021Navigating to the Campaign Template menu option will take you to the list of already created campaign templates. Here, you can search for templates using the text boxes. Each template will have three actions you can take. Select Update to modify any details of the campaign like Name, Description, SOR Status (Active or Inactive), Change Applications, inclusion of entitlements. Note: If an associated campaign is already launched, only a Name and Description update is allowed Select Details to get a summary of requirements for the template. Select Delete to remove the template. You will be prompted to confirm. Note: If the template is associated with a campaign, then it cannot be deleted. You will receive a message indicated the campaign name. The campaign must be deleted before the template can be deleted. Adding a New Campaign Template Navigate to Campaign Templates in the left-hand menu and select the Add button. A new menu will appear where you can enter the requirements for the template. Enter Template Name. Choose a Description to identify the Campaign. Select either Active or Inactive or both to designate status of users to be pulled into the review User Status use case: If the System of Record has status information, campaigns can selectively choose active or inactive users to be pulled into a review. Selecting Inactive users is an easy way to answer the question “who is inactive in my HRIS/SOR, yet still has access to our applications?” Under Applications select which applications will be brought into scope for the review. Selected applications will populate below. Confirm and Save. You’re now ready to customize your campaign using your newly created template! See instructions for campaign customization here.
Campaign Restrictions
Last Updated: November 24, 2021Campaign restrictions is for the use case when you would want specific users to perform access reviews for their own entitlements. By default SecurEnds does allow for a user to review themselves. Although, when there is a special use cases where there are some users that have the ability/allowance to review themselves in a company, it can be done here. Example: A CEO of the company where there is no one above the CEO to perform a review can use this option to conduct a review for themselves. Simply enter the email and select Add User. Note: any restrictions (users that can review themselves) will need to be present in the Source of Record (SOR) or need to be setup by the clients SecurEnds Admin before you create a campaign.
Creating Campaigns
Last Updated: October 31, 2023Adding a New Campaign Customizing Your Campaign Campaign Reviewer Campaign Reminders Campaign Instructions Launch Campaign
Assign Campaign Owner
Last Updated: October 31, 2023Campaign Owner functionality to all newly created campaigns is an optional feature to assign an owner of a campaign. This new assignment gives the users selected Admin level permissions to the campaign to review assigned reviewers and make updates. Steps to assign a campaign owner: Step 1: Once the campaign is being created, navigate to the Assign Campaign owner option. Note: Once the campaign is launched, the assigned campaign owner will receive an email stating they are given the ownership of the campaign.
Delegation
Last Updated: January 21, 2022There are two types of delegations that can be made: People Delegation and Credential Delegation. The Credential Delegation need to be in place before you create a campaign where as the People Delegation can be set anytime. People Delegation: When it is known that the original reviewer will not be available for a User Access Review, the SecurEnds Admin can delegate the reviews to another individual. This will not remove the original reviewer from the User Access Review or receiving campaign emails, delegation will simply allow another user to view and perform the User Access Reviews on behalf of the original reviewer. If enabled, both parties will receive an email that there has been a delegation for an upcoming review. If you use the Campaign Remind action, both the original manager and the delegate will receive the Campaign Reminder email. Credential Delegation: Credential Delegation is an option that lets you define a different reviewer for the direct reports of other managers (i.e senior executives, CEO’s) who do not need to be a part of a campaign. A Credential Delegation allows the admin to delegate a specific user’s reviews (maybe a CEO and other executive level employees) to another manager/reviewer. This new selected manager/reviewer will be conducting a review and act as a reviewer to that direct report throughout the campaign. The original manager will be completely removed from the campaign and any campaign emails. This delegation type is assigned by Application within the SecurEnds application and must be in place before the campaign is created. Unlike a People Delegation, with a Credential Delegation you are re-assigning the direct reports to a different reviewer. Once the SecurEnds Admin assigns a Credential Delegation, all campaign notifications will be sent to the new delegate and not the original reviewer/manager. Steps For People Delegation: To assign a new People Delegation, click on Add a new window will pop up on the right hand side. Type the previous reviewer’s email address under Reviewer Email and the new delegate’s email address that is present in the Source of Record (SOR) in the Delegate Email. Click Save. Once added, the new delegate will receive a delegate email notification with the previous reviewer cc’d on it. You can use the Delete action to remove the delegate at any time. Steps For Credential Delegation: To assign a new Credential Delegation, select Credential Delegation from the drop down. Select the application which the managers direct reports are included. You can select All Applications if you like. Keep in mind that the direct reports of the manager would need to be in all applications for the person to be searchable. Once you have the application selected, type the name of the direct report into the Search Email box, let the application find that person and select them. Select the credential in the box area below. Type the name of the “new” Reviewer in the Reviewer text box, let the application find that person and select them. Hit Save. The page will refresh. You will need to re-select the application from the drop down or select All Applications to see your delegations. You can use the action Gear icon to Delete the delegate at any time.
Campaign Reports
Last Updated: March 8, 2022The Campaign Report option will bring up a list of all campaigns created. The default view will be to show all the campaigns. But you can use the Status drop down to filter the campaign list further by those that are in Ready, Open or Closed status. The SecurEnds Admin will have two actions that can be utilized for each campaign: Select Report to view two reports options which are available for a Campaign. You can click into the Pending, Approved or Revoked parts of the pie chart. Once you click Report, a new page will appear with a pie chart that depicts the status of the selected Campaign under Campaign Report and the Campaign Effectiveness Report. The pie chart is interactive and will allow you to see each information by clicking the desired option. Campaign Report: As we select and click the various options on the pie chart, the information will start to populate on the screen below. The tool also offers to export this report into a CSV file. Click Export, a CSV file would download which would have all the data from the campaign in it. Campaign Effectiveness Report: With this selection a user is able to get granular with the campaign status by selecting options such as Application and Time period. It also displays the start and end dates of the campaign with the ability to export the data.
