Campaign Configuration
Last updated
Last updated
Complico's Access Management Campaign is strategically crafted to not only achieve but also maintain compliance in the realm of access management.
Its overarching goal is to enhance the security and privacy of our organization while mitigating the potential for back-door breaches and associated risks.
A Campaign within Complico's Access Management framework is a systematic process involving the review and adjustment of access permissions for selected applications.
During a Campaign, specific time limits are established for managers and vendors to approve permissions for their subordinates.
The aim is to prevent excessive user privileges, particularly in relation to Segregation of Duties (SOD), and to remove users who are no longer relevant, such as those no longer associated with the organization.
This structured approach ensures the ongoing maintenance of optimal access levels.
To initiate the configuration of a new Campaign, navigate to the Review Campaign Config tab, as indicated by the arrow below.
On this page, proceed by clicking on the Add Configuration button, denoted by the arrow below.
This is the new Campaign Configuration page.
Once the configuration is complete, it will be saved as a Campaign for future manual use or automatic scheduling, as indicated by the options below.
To commence, provide a name for the new Campaign and, if desired, include an optional description.
Now, within the circled section below, you can choose whether to initiate the Campaign manually or schedule a specific timeframe for its execution.
When opting for the Schedule option, specify the start date for the initial Campaign run and determine the interval, which can be set in terms of weeks, months, or years.
Highlighted below is the Application selector, the next step in the process.
Toggle the 'Enable' option for the applications you intend to include in this Campaign, drawing from the applications listed in your Applications tab.
The default time allocated for each stage is set at 7 days, but you have the flexibility to adjust the timeframe for each stage.
It's essential to note that this timeframe acts as a gentle reminder for managers and approvers to fulfill their tasks.
In the event that the designated time expires without any action, no automatic measures are triggered.
Notifications are dispatched as the timeframe approaches its conclusion.
The Final Approver is a role assigned by us. Once all modifications are implemented, and a consensus is reached regarding the permissions of the application accounts, we designate a collaborator to provide the final approval for the campaign.
This final approval action is automatically documented and uploaded as evidence.
The final step involves selecting an evidence repository for the campaign to be uploaded to.
Click on the 'Add Evidence' button, as indicated by the arrow below.
Within the Add Evidence window, choose the desired Framework, Control, and Evidence for the campaign.
You have the option to select multiple evidences into which the campaign will be uploaded.
To remove an evidence, click on the X button next to it, as indicated by the arrow below.
Once the Campaign is saved, you can review it on the Review Campaign Config page, which provides a list of all configured campaigns.
Click on the respective campaign to access available actions and details.
On the Campaign's page, you have the options to Edit, Run, or Delete it.
To initiate the campaign, click on the Run button, as indicated by the arrow below.
The Campaign is divided into five stages ().
To return to the
To return to the
