Oracle Cloud Infrastructure Documentation

Create Ownership Review Campaigns

You can review ownership of resources that are created within Oracle Access Governance by setting up on-demand Ownership Review Campaigns. These can be one-time or periodic review campaigns.

Navigate to Review Ownership Campaigns

Ownership Campaigns are created from the Oracle Access Governance Console. Choose the Oracle Access Governance system to launch the on-demand ownership review process.

  1. Sign in to Oracle Access Governance Console.
  2. Select one of the following options to go to the Campaigns page:
    1. On the Oracle Access Governance Console home page, select the Access Reviews tab. Select the Define a new campaign tile.
    2. From the Navigation icon Navigation Menu, select Access Reviews > Campaigns.. From the Campaigns page, select Create a campaign.
  3. Select the Oracle Access Governance review system, and then select Review ownership.

On the Create a new ownership review campaign workflow page, choose the resources for which you want to run the ownership reviews.

Select Resources for Ownership Reviews

Select the resources for which you want to review ownership. By default, Oracle Access Governance considers ownership review for all the resources.

  1. Select the resource tile for which you want to review ownership. Clear the tile that you don't want to include in the review. You can select from:
    • Access Bundles
    • Approval Workflows
    • Identity Collections
    • Orchestrated System
    • Policies
    • Roles
    • Access Guardrails
    • Campaigns
  2. Select Next to refine your selection and apply filters in the Add filters step.

    At any point of time, select Save draft to save the campaign and pick up later to work on the details.

Apply Filters to Select Resources

Add filters to refine your selection. You can choose to review the ownership of resources that haven't been reviewed within the selected number of days. You can refine further to choose your specific resources by adding filters. By default, all the available resources are considered for ownership review.

  1. Add Filter in the Last Reviewed step to select the number of days since the last ownership review.
    Example: Choose Over 90 days to include ownership review of resources that haven't been reviewed in the last three months or 90 days.
  2. Refine your selection in the Selection criteria step.
    1. Select the Add Filter button.
    2. Select one of the resources in the What do you want to refine? list.
    3. Select the search criteria to find your resources. You can search a resource by resource name, primary owner name, last updated, created date, or created by options.
    4. Select the logical operator of your choice.
    5. Select the value and click Apply.
  3. In the Selection filter section
    1. Select the edit icon edit icon to modify the value listed in the applied filter.
    2. Select the delete icon delete icon to remove the filter.
    The panel on the right-side of the page shows you the effect of your selection and provides you with an estimate of included resources considered for ownership review. You can also view current filters selected for the campaign.
  4. Select Next to proceed to the Assign workflow step.

Add Access Reviewers by Selecting Approval Workflow

In the Assign workflow dimension, you select the approval workflow for your access review.

  1. Select one of the following approval workflows to assign to the access review campaign.
    1. Owner, where primary owner of a resource will be assigned as the reviewer. Consider fallback process before configuring this workflow.
    2. Custom User, and then select any active workforce Oracle Access Governance identity as a reviewer.
  2. After you have selected your workflow, click the View approval workflow link to see a graphical representation of the selected workflow.
  3. Select the scope of justification required for review decisions. You can select for reviewers to add comments for all the review decisions or keep the justification field as optional.
  4. Select Next to proceed to the Add details dimension.
    At any point of time, select Save draft to save your campaign and pick up later to work on the details.

Add Owners

You can add primary and secondary owners to the campaigns. For existing campaigns, primary owner is selected as the campaign owner, with no secondary owners.

By default, the resource creator is selected as the resource owner.
  1. Select an Oracle Access Governance active user in the Who is the primary owner field.
  2. Select one or more users in the Who else owns it? field. You can add up to 20 additional owners.

    The Primary Owner is displayed in the campaign list. All assigned owners can view and manage campaigns they own.

If the primary owner isn't a valid campaign owner, fallback mechanism is auto triggered to assign a new owner. See Understanding Fallback Mechanism: Methods to Prevent Campaign Termination.

Add Campaign Details

In the Add details dimension, select campaign schedule cycle, give a meaningful name to your campaign, add a supporting description, and assign values to additional attributes, such as campaign owner, and when the campaign should start or end.

To add details :
  1. Select an appropriate schedule cycle in the How often do you want this to run? field.
  2. In What do you want to call this campaign?, enter a unique campaign name.
  3. In How do you want to describe this campaign, enter campaign description.
  4. Select one of the following for the Oracle Access Governance and Oracle Identity Governance (OIG) systems:
    OptionDescription
    Include account reviews Select this option if you want to include identity access reviews for accounts along with permissions. Clear the check box to exclude account reviews.
    Include role reviews Select this option if you want to create identity access reviews for roles along with permissions. Clear the check box to exclude role reviews.
    When reviewing permissions, reviews for accounts and roles are included by default. If you exclude both account and role reviews, only permission reviews are generated.
  5. Based on the schedule cycle selected in Step 1, select the time at which you want to launch the campaign.
    • For One-Time, select either Run now or Schedule Later. By default, the campaign is set to begin at the top of the next hour, the following day of campaign creation.
    • For campaign series, select the calendar icon and select the start and end date and time for the campaign.
  6. Once you have set your preferences, select Next to go to the Review and submit dimension.
  7. (Optional) You may select one of the additional actions:
    • Save Draft: To save your changes and later come back and edit the workflow or details.
    • Cancel: To cancel the current process.
    • Back: To go back to the previous step.

Review and Submit the Campaign

In the Review and submit dimension, review the campaign details and create the campaign.

To review and submit your campaign :
  1. Review the campaign information. For any changes, select the Back button.
  2. Select Create. The campaign is successfully scheduled.