Configuration of Group Membership and Team Certification

You can run the group or team review and membership certification process using one of these automation rules:

• AD Groups Certification Review rule,

• Office 365 Groups Certification Review rule,

or

• Microsoft Teams Certification Review.

These rules would enumerate Active Directory, Office 365 groups, or Teams, create a new certification request for each group or team, assign created requests to owners, and send them an email notification. Owners can open Cayosoft AdministratorWeb Portal and complete the group or team review and certification.

Video Tutorial

Create certification review rules

To create an instance of the Certification Review rule, do the following:

1. In the Cayosoft Administrator Console, click +NEW > Rule.

2. Click the Show all templates link.

3. In the filter field type Certification.

4. Select AD Groups Certification Review, Office 365 Groups Certification Review, or Microsoft Teams Certification Review rule.

5. Click Next.

6. On the Rule Output step choose Create and Save Report.

7. Click Next.

8. On the Rule name step, click Create new folder (label).

9. In the Create new folder field, type the folder name.

10. Click Finish

Repeat these steps if you need to create all rules - for AD groups, Office 365 groups, or Teams.

Configuration of certification review rules

For rules configuration, please see the following rules:

• AD Groups Certification Review

• Office 365 Groups Certification Review

• Microsoft Teams Certification Review

NOTE: In case of a replication group is configured in your environment, for better performance, Cayosoft recommends running certification rules on the publisher.

Customization of Certification Wizard texts

You can customize all texts that are displayed in the Certification wizard. Please see the article.

Configuration of Cancel Expired Work Items rule

Typically, there is a certain period for an owner to complete his certification requests. If none of the owners completes the request in time, the request expires.

To automatically expire the requests that are not processed, configure the schedule for the Cancel Expired Work Items rule predefined rule. This rule compares the dates: the current date when the rule runs and the due date in the certification work item. If the date in the work item is in the past, the rule changes the state of the corresponding work item from New to Expired and performs remediation action that is defined in the certification rule. After that, if the Expired notification even is enabled, the notification will be sent.

1. Navigate to Home > Rules > Built-in Rules (Pre-configured) > Cancel Expired Work Items rule.

2. Schedule this built-in rule to run daily or less frequently.

Delegate access to My Tasks

To delegate the certifiers access to My Organization > My Pending Tasks web query and to perform Certify web action a new delegation must be created within the Web Administrator Roles:

1. In the Cayosoft Administrator Console, navigate to Configuration -> Roles -> Web Administrators.

2. Click the Add Delegation Rule button.

3. Type the name for the new delegation rule.

4. Below the Trustees list, click Add.

5. Search and add the users or groups that will be the certifiers and be able to see the My Organization administrative unit and My Pending Tasks query.

6. Click OK.

7. Below the Trustees Permissions, Click Add Scope.

8. In All Admin Units, select My Organization.

9. In All Web Queries, select My Pending Tasks.

10. In the All Actions, check Certify.

11. Click OK.

12. Click Save Changes.

Delegate access to Certification Dashboard

To control the certification process, it is also possible to delegate access to Work with Certification Dashboard, where administrators can perform Certify, Cancel and Delete certification requests. Also, in the Updated column in the Certification Dashboard administrators can see the group's certification date.

1. In the Cayosoft Administrator Console, navigate to Configuration -> Roles -> Web Administrators.

2. Click the Add Delegation Rule button.

3. Type the name for the new delegation rule.

4. Below the Trustees list, click Add.

5. Search and add the users or groups that will be able to see the Certification Dashboard.

6. Click OK.

7. Below the Trustees Permissions, click Add Scope.

8. In the All Admin Units check Dashboards.

9. In the All Web Queries, check Certification Dashboard.

10. In the All Actions, check the actions that you want to delegate: Certify, Cancel, Delete, or Change history.

11. Click OK.

12. Click Save Changes.