Create Remediation Steps
Each remediation step names two access points:
-
A "Remove" access point is one involved in an access incident. Your purpose is to simulate what would happen if you were to remove it from a role hierarchy.
-
A "From" access point should always be the immediate parent of the Remove access point in a role hierarchy.
If you're basing the simulation on a visualization, you may use the following method to select pairs of access points for remediation steps. This method isn't available if you opened the create page from the Access Simulations page.
-
In the Remediation Steps panel, click the Visualize icon. A Visualization page opens, displaying the visualization you're basing the simulation on.
-
Click on a solid arrow connecting any two access points in the visualization. With the arrow highlighted, right-click and select Remove. The solid arrow becomes dashed, indicating that the access points are selected for a remediation step.
-
If other pairs of access points are appropriate for you simulation, repeat the previous step to select them.
-
If necessary, cancel selections: Click on a dashed arrow. With that arrow highlighted, right-click and select Reset. The dashed arrow becomes solid once again.
-
Select Done. You're returned to the Create Access Simulation page, and each pair of access points you've selected appears in a row of the Remediation Steps grid. For each pair, the parent access point occupies a From Access Point field, and the child access point occupies a Remove Access Point field.
A second method of selecting access-point pairs for remediation steps is available no matter how you create the simulation.
-
In the Remediation Steps panel, select Add. A row appears in the grid.
-
In the Remove Access Point field, click Search. In a Search and Add dialog, search for and select an access point involved in an access incident.
-
If you're basing the simulation on a visualization, the Search and Add dialog limits you to access points that both appear in the visualization and have parent access points.
-
If you aren't basing the simulation on a visualization, the Search and Add dialog enables you to select among all access points.
-
-
A From Access Point field becomes active only after you make a selection in the Remove field. Click Search in the From field.
-
If you're basing the simulation on a visualization, a Search and Add dialog limits you to access points that are parents of the Remove access point, each in a distinct role hierarchy. Select one.
-
If you aren't basing the simulation on a visualization, the Search and Add dialog enables you to select among all access points. However, be sure to select an immediate parent of your Remove access point in a role hierarchy.
-
-
Repeat these steps as necessary to select other pairs that are appropriate for your simulation. You can also delete pairs. Select a row and click Delete.
When you finish creating remediation steps, save your simulation.