ABAC Profile Settings

This article details the various settings available on the Settings page for an individual ABAC Profile.

Activation Status

The Corresponding Activate Profile or Deactivate button in the top right corner lets you control at the ABAC Attribute level if Provisioning is allowed or disallowed for all ABAC Profiles associated with this particular ABAC Attribute.

Clicking Activate Profile would Activate the ABAC Profile, and clicking Deactivate Profile would Deactivate the ABAC Profile (the button shown is the opposite of the current Status).

ABAC Profile Owners

This option allowed establishing owners (or those responsible for this ABAC Profile).

An ABAC Profile can have more than one owner, and the UI changes based on the amount of owners defined. Use the Search field when you click on the Owners button to find and add new owners, or uncheck existing owners to remove them.

Attribute Maintenance

Profile Actions

Alias Profile (Rename)

This option lets you reset the entire set of ABAC Profiles created for this ABAC Attribute and all entitlements associated with them.  Clarity will then rebuild all of the profiles from scratch, and insert any Entitlements into the ABAC Profile which are held by ALL Active member Identities in the Profile.

Merge Profile

This option lets you merge one ABAC profile with another. When you click this button from an ABAC profile, you will be guided through the merging process.

1. First, you’ll be prompted to select 1 or more other ABAC profiles to merge together.  
   

2. Once you’re done selecting profiles, you can click the Name Merged Profile button at the bottom right to continue. From here, you can either click the drop down to select the name of one of the previously selected profile, or create a new unique name.

3. Finally, you will decide what action to take with the entitlements being merged into the newly created profile. You can either, Keep Access, Deprovision Immediately, Convert to Exception, or Set Expiration.

   

Clone Profile

This option will create another profile with the same entitlements, renaming it to a new unique name.

Split Profile

This option will allow you to undo a merge. After clicking this option, you will need to select which profiles you would like to split.

Run Underprovision Checker

This will run the under provision checker, scanning all users who are associated with the profile in question, and automatically granting any missing access they should have based on the profile. Note, this will require write access to the source systems to successfully run.

Build ABAC Entitlements

This will add all entitlements to the profile where 100% of the identities have direct-assignment to the entitlement.

ABAC Profile Change Log

You can utilize the ABAC Profile Change Log to review the entitlements that have been added and removed from a given profile, when they were removed, and who removed them.

Need help?