Manage and Monitor Access Review Campaigns

Users with the Administrator application roles can manage and monitor all types of access review campaigns using the Oracle Access Governance Console.

Users with the following Oracle Access Governance roles can access these:

  • Administrator: Can manage and monitor all campaigns in the Oracle Access Governance Console.
  • Campaign Administrator: Can manage and monitor campaigns that they have created.
  • Auditor: Can monitor all campaigns in Oracle Access Governance.
  • Campaign Owner (User): Can manage and monitor the campaigns that they own.

Search and Apply Filters to View Available Campaigns

You can retrieve campaign by performing keyword search or applying filters based on campaign status. You can apply suggested filters to view focused information.

Campaign Owners can only view the campaigns that they own, and not all the available campaigns.
  1. Log on to the Oracle Access Governance Console with a user assigned either the Administrator or Campaign Administrator application role.
  2. Select one of the following options to navigate to the Campaigns page:
    • On the console home page, select the Access Reviews tab and then select one of the following options.
      • To view in In progress or Ready for Approval campaigns, select the Show me my <number> ongoing campaigns tile.
      • To view Ready for Approval campaigns, select the <number> campaigns are ready for approval tile.
      • To view all campaigns, select the Show me all campaigns tile.
    • Click the Navigation Menu icon, and then Access Reviews, and then Campaigns.
  3. For keyword search, type campaign name in the Search field and press Enter on your keyboard.
  4. To view focused results, select one or more suggested filters available directly under the Search field.
  5. To apply filters based on campaign status, use the drop-down menu in the top-right corner of the page. Select one from the following:
    • My ongoing campaigns: Displays campaigns with a Status of In progress or Ready for approval.
    • My upcoming campaigns: Displays campaigns with a Status of Scheduled or Draft.
    • My previous campaigns: Displays campaigns with a Status of Approved, System ended or Terminated.
    • All campaigns: Displays all available campaigns.

View Campaign Details

View campaign details to see the campaign description, selection criteria, review process, included identities or access control items considered for review, approval workflow, or perform additional actions on the campaign.

The information displayed and applicable actions vary based on the campaign state. Here's how you can view campaign details:

  1. Go to the Campaigns page
  2. For the campaign, select the corresponding Menu Menu icon, and then select View campaign details.

Edit an Access Review Campaign

You can edit a Draft or Scheduled campaign before it is launched to modify the details. You can edit the selection criteria, workflow and reviewer details, campaign details, and schedule of campaign. You can change campaign ownership for an ongoing campaign In Progress or Ready For Approval campaigns.

  1. Go to the Campaigns page
  2. For the campaign that you wish to edit, select the corresponding Menu Menu icon, and then select Edit.
    The Edit campaign page provides the same guided workflow for entering your campaign parameters as the Create campaign page.
  3. On the Review and submit step, select Update. Alternatively you can select Back to edit values, or Cancel to discard your changes.

Change Campaign Ownership

You can change campaign ownership for an ongoing In Progress or Ready For Approval campaigns.

  1. Go to the Campaigns page
  2. For the campaign that you wish to edit, select the corresponding Menu Menu icon, and then select Change ownership.
    The Change ownership pop-up panel displays. You can see the current owner name.
  3. Select the New owner from the list and then select Change. You'll see a confirmation message and the updated campaign owner name displays on the Campaigns page. The updated owner would be used for the fallback mechanism. For more details, see Fallback Mechanism in Access Review.

Clone a Campaign

To generate similar access reviews, you can clone an existing campaign. The cloned campaign uses the existing access review criteria. However, you can modify the campaign details, campaign owner, or assign a new approval workflow.

Here's how you can clone an existing campaign:
  1. Select one of the following options to clone a campaign:or from the Actions menu on the campaign detail page
    • On the Campaigns page, from the list, select Menu Menu icon, and then select Clone corresponding to the campaign that you want to clone.
    • On the Campaigns detail page, from the Actions menu, select Clone
  2. Select the Clone task to make a clone of the current access review campaign. You are taken to the Clone campaign page.
  3. On the Clone campaign page, enter the following information
    1. How often do you want this to run? : Select One time to run a single occurrence of this campaign, or select a recurring pattern like Quarterly, Monthly, Half-Yearly, or Yearly to run this access review campaign periodically.
    2. What do you want to call this campaign?: Provide a name for the cloned campaign.
    3. How do you want to describe this campaign?: Provide a description for the cloned campaign.
    4. Who owns this campaign?: Provide details of the owner of the cloned campaign.
    5. How would you like to schedule your campaign?: You can view this field only if you have selected to run your campaign one time. Select either Run now or Schedule Later. By default, the campaign is set to begin at the upcoming next hour, the following day of campaign creation.
    6. When do you want to Begin?: If you have set a recurring pattern, then select the start date of when you want to begin the campaign series. By default, the campaign is set to begin at the top of the next hour, the following day of campaign creation. If you want to change this, select the Select Date Time icon and add a new date/time.
    7. When do you want to End?: If you have set a recurring pattern, then select the end date of when you want to end the campaign series.
    8. Which approval workflow should be used?: Select the approval workflow that you want to assign to this access review campaign. For details on how to create and manage approval workflows see Create Approval Workflow and Manage Approval Workflow.
  4. When you have set your clone preferences, select Create to clone the current campaign.
    (Optional) To save your changes and later come back and edit the workflow or details, select Save as draft, or to cancel the current process, select Cancel.

Approve a Campaign

When the review tasks have been completed or the campaign due date has elapsed, the campaign moves to the Ready for Approval state. You can then Approve the campaign, and close the review process.

  1. Go to the Campaigns page
  2. For the campaign that you wish to approve, select the corresponding Menu Menu icon, and then select Approve.
    You will see a confirmation message stating that the campaign has been approved. You can view the approved campaigns in the my previous campaigns or All campaigns category.

Terminate a Campaign

You can terminate a scheduled campaign at any point of time until a campaign is approved or system ended. For a periodic campaign, you can cancel all the ongoing (currently running) and upcoming (scheduled in future dates) access reviews campaigns for that series.

  1. Select the Terminate task to terminate the current access review campaign.
  2. On the Confirmation pop up dialog, select Terminate to end the campaign.
  3. If you have a periodic campaign, and want to terminate entire series, select Terminate Series.
    For Draft campaigns, you can Delete the campaign.

View and Download Access Review Reports

Once the campaign is launched, you can view and download access review report for each campaign. In addition to viewing report, you can also save the reports offline in PDF format or download the CSV data for record-keeping or further analysis or audit.

You see a report displaying access review details and a breakdown of pending, approved, or revoked access review decisions for user role, user account and permission.
  • For identity access reviews, you see the bifurcation of the review decisions based on top five organization, source organization, roles, and applications.
  • For access control reviews, you see a breakdown of pending, approved, revoked, or modified access review decisions along with grouping of top five created since date ranges for identity collections or policies.

For example, if you have an identity review campaign setup that impacts applications and different roles, you should see the report displaying the top five applications and top five roles for which these access reviews are generated.

  1. Go to the Campaigns page
  2. For a campaign that you wish to view report, select the corresponding Menu Menu icon, and then select View report.
  3. If you want to retain a copy of the report, select Download <certification type> PDF, else select Close to return to the campaign.
  4. To download CSV data:
    1. Select Download CSV data to generate a comma-separated values file with data for the campaign.
    2. On the Download CSV data confirmation pop-up dialog, select Download to download the CSV file.