Campaign Configuration

Regulait's Access Management Campaign is designed for achieving and maintaining Compliance on the Access Management frontier, and increases Organization's security and privacy, reducing any backdoor breaches and risks.

What is a Campaign?

A Campaign is a process where we review and adjust access permissions for chosen applications.

We set time limits for managers and vendors to approve their subordinates' permissions, prevent excessive user privileges (SOD), and remove irrelevant users, like those no longer with the organization.

It's a structured approach to maintaining optimal access levels.

Configure a New Campaign

To configure a new Campaign, select the Review Campaign Config tab (marked with an arrow below).

the Campaign Config tab is marked with an arrow

Here, click on the Add Configuration button (marked with an arrow below).

the Add Config button is marked with an arrow

This is the new Campaign Config page, after we finish the Configuration it will be saved as a Campaign for future manual use, or automatic use with the schedule option below.

First, we'll name the new Campaign and, optionally, describe it.

the New Campaign Config page

Now we select (circled below) if the Campaign begins by running it manually, or by scheduling a timeframe for it.

the Scheduler step is circled

When selecting the Schedule option, we choose the start date for the first Campaign run, and the interval.

We can choose the interval using weeks, months, or years.

setiing an interval timeframe for the Campaign

Circled below, the next step is the Application selector, where we toggle 'Enable' for the Applications we wish to include in this Campaign (from our Applications tab).

selecting Applications to be included in the Campaign

The Campaign is divided into five stages (see - Campaign Review).

The default time for each stage is 7 days, but we can change each stage's timeframe.

Please be aware that this timeframe serves as a gentle reminder for managers and approvers to complete their tasks.

If the designated time elapses without action, no automatic measures are triggered.

Notifications are sent as the timeframe approaches its end.

selecting timeframes for each Campaign stage

The Final Approver will be decided by us, after all changes are applied and all sides reach an understanding of the Application Accounts' permissions, we select a Collaborator to finally sign the Campaign, that is automatically uploaded as an evidence.

adding a Final Approver to approve the Campaign

The last step is selecting an evidence for the Campaign to be uploaded to.

We'll click on the 'Add Evidence' button (marked with an arrow below).

the Add Evidence button is marked with an arrow

In the Add Evidence window we select the desired Framework, Control and Evidence.

selecting an Evidence for the Campaign to be uploaded into

We can select multiple Evidences that the Campaign will be uploaded into, to remove an evidence click on the X button next to it (marked with an arrow below).

the Remove Evidence button is marked with an arrow

After saving the Campaign, we can view it in the Review Campaign Config page, that lists all of our configured campaigns.

Click on the Campaign to view our available actions.

the configured Campaigns list page

in the Campaign's page, we can Edit it, Run it, or Delete it.

To begin the Campaign click on the Run button (marked with an arrow below).

in a configured Campaign's page, the Run button is marked with an arrow

To return to the Access Management Guide hub, click here.

To return to the main guide hub, click here.