Theoretical rights examples – collect

Thanks to this sample add-on, find out how to include in your Brainwave GRC project analyses about theoretical rights by configuring the data collect.

This add-on includes three example files of theoretical rights matrix available in the folder “importfiles/bw_theoreticalrights/example”.
Therefore the add-on propose three different types of theoretical rights analysis:

• on the unique HR ID (HRCODE) of the employees,
• on the organization the identities belong to,
• on the applications profiles and roles.

You are able to modify, complete these files or to add new ones and create theoretical rights analysis on different criteria.

This add-on works as follow:

1. Silo and data discovery

A silo file is provided and allows to iterate on source files and create in the identity ledger a silo name based on each application name reflected in the source files name.
The source files validation step is also activated in the silo.
By default, discovery files through which the verification is done are proposed, the names of the three files to check are specified, the presence of the mandatory attributes, etc…
These validation steps are integrated in the discovery files.

2. Data collect

A main collector line allows to check to which type of matrix, from the three types proposed, the source file provided by the silo belongs.
The child collector lines allow to create the related theoretical rights objects in the Identity Ledger.

3. Theoretical rights policy

The theoretical rights policy includes the rules that resolves theoretical rights in order to find out the involved people in the Identity Ledger from the theoretical rights matrix informations.

4. Theoretical rights controls

The theoretical rights controls available in this add-on are basic controls that allows to determine what is the identity perimeter and the applications perimeter to deal with.
They allow to identity in the related perimeters people with over-allocation and under-allocation.

version 1.0

initial version