Mover

The Mover feature, part of the Lifecycle Management module, automates user transitions and access management based on predefined rules. This ensures that user access rights are automatically updated, revoked, or reassigned according to their movement (vertical/lateral) within the organization.

Typical Mover use cases include movement across departments/designations/roles.

For example, a sales executive promoted to sales manager will require elevated access to CRM.

Mover Dashboard

The Mover Dashboard is a central interface in Lifecycle Management that offers a comprehensive view of user transitions and access changes governed by Mover rules. It assists administrators in monitoring, configuring, and verifying the mover process.

Key features of the Mover Dashboard include:

  • Filtering & Search Options: Allows tracking user transitions using filters such as "Start Date" and "Overlapping Date," and searching for specific users or applications affected.

  • User Transition Status: Displays users with modified access and their deprovisioning status, indicating which applications will be revoked based on Mover rules.

  • Audit Logs & Verification: Provides logs to confirm successful Mover triggers and to track when and how user access changes were applied.

Steps to Configure Mover:

Step 1: Access Mover Feature

The Mover feature is located within Lifecycle Management, which is a component of Products in the Cymmetri dashboard.

Step 2: Enable Mover Process

To enable Mover, click the toggle button. A confirmation prompt will appear; click "Confirm" to proceed. A pop-up message "Mover process config enabled successfully" will confirm activation.

Step 3: Configure Mover Process

After enabling Mover, configure the process by:

  • Entering the number of overlapping days.

  • Add the trigger attribute.

  • Adding applications to the excluded list. Remember to save configuration.

Step 4: Add Provision Rules

Once Mover is enabled and configured, add provision rules. Click on "Add New" to begin the configuration process for a new rule.

Step 5: Define Provision Rule Details

When creating a provision rule:

  • Provide a name and description for the rules.

  • Activate the toggle button to enable the rule.

  • Add the necessary applications and define conditions using the "OR" logic.

  • Save the configuration to apply the rule.

Step 6: Verify Mover Trigger via Identity Hub

To verify if Mover is triggered according to the provision rule, update the Identity Hub user:

  • Navigate to "User" and select "Edit User".

  • Make the required updates.

  • Click "Save" to apply the changes.

Step 7: Check Audit Logs for Mover Detection

Go to "Logs" and select "Audit Log" to confirm successful Mover detection.

Step 8: Review Deprovisioning Status in Mover Dashboard

In the Mover Dashboard, use the "Filter" option, select the "Start Date" and "Overlapping Date," and click "Apply" to view the status of applications scheduled for deprovisioning

Last updated

Was this helpful?