Smart Provisioning › Suggested Provisioning Roles › Criteria for Suggested Roles

Criteria for Suggested Roles

CA Identity Governance suggests provisioning roles for a user based on one or more of the following criteria:

• Match Rule

  CA Identity Governance suggests provisioning roles if the current user matches the rule that determines membership in the CA Identity Governance rule-based role.

  For example, the Sales Manager role has the following matching rule: Title = Sales Manager. If a user has Title=Sales Manager but is not a member of Sales Manager role, CA Identity Governance suggests this role for this user.

• Match Attributes

  CA Identity Governance suggests provisioning roles that belong to users with similar attributes.

  For example, an administrator wants to assign roles to an employee who has the following attributes in his profile:

  • Title: Sales Associate
  • Manager: Bob Folchart
  • Office: Northeast

  Users who have the same title, manager, and office have the Employee and Northeast Sales Associate roles. CA Identity Governance suggests these roles for assignment.

  CA Identity Governance calculates the probability that the suggested role is a match for the user by using the following criteria:

  • How closely the attributes from other users match the attributes of the current user
  • How many users with matching attributes have the role

  The best matches have the highest number of matching attributes and the largest number of users with the same role. For example, ten users who have the title Sales Associate and the Manager Bob Folchart have the Remote Employee role. Five users who are located in the Northeast office have the Quota-based Salary role. The Remote Employee role would receive a better match rating than the Quota-based Salary role.