1. Implementing Risk Management
  2. Import Role-Assignment Data

Import Role-Assignment Data

You can import role-assignment data for analysis by access models and controls. The imports are from applications, such as Workday and Salesforce, that aren't among the synchronized data sources to which you can set up connections. Data from these applications form a data source called Imported.

One way to import (or update) access data is via import files. (A second way to import data is via a REST API.)To use import files, complete three tasks:

  • Export a template from Advanced Controls. The template is an Excel worksheet. For the first import, the template is blank. For subsequent imports, the template contains data from the previous import.

  • For your first import, enter records of role assignments in applications you want models and controls to analyze. For subsequent imports, edit the existing records, typically by adding or removing role-assignment records.

  • Import the template back into Advanced Controls.

Export the Template

You export the template from a Select Business Objects page, which becomes available when you're in the process of creating or editing an access model. Although you download the template in the context of a specific model, other models may analyze the data you'll use the template to import.

  1. Navigate to Risk Management > Advanced Controls > Models. Then do either of the following:

    • Select Actions > Create Access Model. In the Create Access Model page, enter a name for the model.

    • Select the record of an access model, then select Actions > Edit.

  2. Click Add in the Model Objects panel of the create- or edit-model page. The Select Business Objects page opens.

  3. Click the Export Access Data icon in the Select Business Objects page. A message presents a job ID. Note the ID, then close the message.

  4. Click the Monitor Jobs button. In the Monitor Jobs page, locate the row displaying the job ID you noted. Monitor the job status until it reaches Completed.

  5. Once the job is complete, click a file-download icon that appears in the job's row. In a distinct save-as dialog, navigate to the folder in which you want to save the template, and click Save.

  6. Click Back in the Monitor Jobs page to return to the Select Business Objects page. If your only intention was to export the data template, click the Back icon to return to the create- or edit-model page, then click the Cancel button. You may instead finish work on a model you're creating or editing.

Populate the Template

The template is an Excel worksheet in which each row is a record of the assignment of a role to a user in an application. It may include records of assignments in any number of applications.

Each record must include the following required values:

  • User Name: The name with which the user logs on to an application.

  • First Name: The user's given name.

  • Last Name: The user's surname.

  • Email: The user's email address.

  • Access Point ID: The internal name for a role assigned to the user.

  • Access Point Name: The display name for the role identified by the Access Point ID.

  • Access Point Type: The only valid value is Role.

  • Application Name: The name of the application in which the role exists. Be sure to adopt a consistent name value for each application.

Each record may also include these optional values:

  • Access Point Description: A description of the access the role provides.

  • Business Process: The name of a business process in which a user assigned the role would work.

Each time you import data, you replace all data from the previous import. So as you edit an import template, be sure to retain all records containing data you don't want to change.

Import the Template

Once the template is updated, you use the Select Business Objects page to import it.

  1. Open the page: Repeat steps 1 and 2 in the Export the Template procedure. This time, click the Import Access Data icon.

  2. An Import Access Data dialog opens. Click its Browse button. Navigate to your edited template file, and select it. The File field of the Import Access Data dialog then displays the file name.

  3. Click the OK button. Once again, a message presents a job ID. Note the ID, then close the message.

  4. As before, click the Monitor Jobs button to track the progress of the job in the Monitor Jobs page. Then click Back to return to the Select Business Objects page, from which you can either cancel or continue working on the model you opened to get to the Select Business Objects page.