Make Certification Decisions in the Enhanced Worksheet

If you're a certifier, you use the worksheet to record your certification decisions about the role assignments you're tasked with reviewing. Each user-role combination begins at the Review status, which means that no action has yet been taken. Your object is to update that status to Keep Role or Remove Role for all user-role combinations in your worksheet.

If a certification is of a type that allows direct managers to participate, a certifier worksheet contains records of user-role combinations that also appear in the My Team worksheets of any number of direct managers. Typically a certifier waits for direct managers to act, and their decisions automatically update the certifier worksheet. However, the certifier is free to modify those decisions or to act before a direct manager responds.

A certifier has two options. One is to update any number of user-role combinations at once:

Select the checkboxes for any number of user-role combinations.

Or click Select All, which would apply to all records returned by filters you've set. These include records that qualify for your filters, but aren't yet on display because you haven't scrolled down to them and so fetched them.

To select a large number of records, you can click Select All, then individually deselect the records you don't want. The action then applies to all records that match current filters and haven't been deselected.
Click one of three action buttons. (These buttons are available only to the certifier assigned to the worksheet, not to role managers or owners with access to the worksheet.)
- Keep Roles: The role assignments are certified as appropriate, and the users should retain their roles.
- Remove Roles: The role assignments are rejected, and a security administrator should rescind the users' access to the roles.
- Investigate: Work continues on determining whether user-role combinations should be certified.
A drawer opens, and includes a Comment field. If you selected Remove Roles, the comment is required. If you selected Investigate or Keep Roles, the comment is optional. If appropriate, add the comment.

If you're updating a single user-role combination, you can write a comment or you can click a Generate button to create an AI-composed comment. It's derived from security-briefing data specific to the user-role combination. It cites factors that suggest both keeping and removing the role, but ultimately it's worded to support whichever action you've chosen.

If you're updating more than one user-role combination, the AI-generated comment isn't available; you can only write a comment of your own. It's added to the record of each user-role combination you're updating.
Close the drawer: click the action button in its lower right corner.

The second option is to accept a recommended action presented in the security briefing for a user-role combination. It applies only to role assignments for which the application has made recommendations, and updates one user-role combination at a time.

In the record of a user-role combination, click the role name to open the Security Briefing drawer.
The briefing may recommend that you keep or remove the role. If so, the recommendation includes a comment justifying the decision and a button to accept the action. If you agree with the recommendation, click the button.

If you disagree with the recommendation, or if no recommendation is made, you can click the Close option in a More Actions menu to close the briefing, then complete the previous procedure to select the action you consider correct. Or you can select a Next or Previous arrow in the briefing to move to the briefing for the next or preceding user-role combination.
If you clicked the action button in the briefing, the Keep Roles or the Remove Roles drawer opens (depending on the recommendation), replacing the briefing. Its Comment field displays the comment that appeared in the briefing. You can accept that comment, or you can click the Generate button to replace it with the more detailed AI-composed comment. Or you can write your own comment.
Close the drawer: click the action button in its lower right corner.