Technical Reference

Identity Governance ENUM

Values
Contents

1 Introduction .................................................................................................................................................................. 7

2 Access Requests ......................................................................................................................................................... 7

2.1 Access Request request status (ENUM: ResourceRequestStatus)..................................................................... 7

2.2 Approval action in approval policy step (ENUM: ApprovalAction)........................................................................ 7

2.3 Item requester type (ENUM: ItemRequesterType) .............................................................................................. 7

2.4 Potential SoD violation approval task delete reason type (ENUM: PsodvTaskDeleteReason) ............................ 8

2.5 Request item status (ENUM: RequestItemStatus)............................................................................................... 8

2.6 Request item value type (ENUM: DynamicParamDataType) .............................................................................. 9

2.7 User type in approval policy step (ENUM: UserType) ......................................................................................... 9

3 Applications ................................................................................................................................................................. 9

3.1 Application type (ENUM: ApplicationType) .......................................................................................................... 9

3.2 Cost type for application (ENUM: CostType) ..................................................................................................... 10

3.3 Currency type for application (ENUM: Currency)............................................................................................... 10

3.4 License type for application (ENUM: LicenseType) ........................................................................................... 10

4 Attribute Definition ..................................................................................................................................................... 11

4.1 Attribute data type (ENUM: AttributeDataType) ................................................................................................. 11

4.2 Attribute state (ENUM: AttributeState) ............................................................................................................... 11

4.3 Attribute type (ENUM: AttributeType) ................................................................................................................ 11

5 Authorization.............................................................................................................................................................. 12

5.1 Authorization permission type (ENUM: AuthPermType) .................................................................................... 12

5.2 Authorization role type (ENUM: AuthRoleType) ................................................................................................ 12

5.3 Authorization roles (ENUM: AuthRole.Roles) .................................................................................................... 12

5.4 Authorization scope type (ENUM: AuthScopeType) .......................................................................................... 14

6 Business Roles and Business Role Approval Policies ............................................................................................... 14

6.1 Business role approval policy type (ENUM: ApprovalPolicyType) ..................................................................... 14

6.2 Business role approval state (ENUM: ApprovalState) ....................................................................................... 15

6.3 Business role detection status (ENUM: BusinessRoleDetectionStatus) ............................................................ 15

6.4 Resource type (ENUM: BusinessRoleItemType) ............................................................................................... 15

7 Certification Policies and Data Policies...................................................................................................................... 16

Technical Reference 2
 7.1 Certification policy status (ENUM: CertificationPolicyStatus)............................................................................. 16

7.2 Certification policy violation status (ENUM: CertPolicyViolationStatus) ............................................................ 16

7.3 Certification policy violation type (ENUM: CertPolicyViolationType) .................................................................. 16

7.4 Data policy criteria type (ENUM: DataPolicyCriteriaType) ................................................................................. 17

7.5 Data policy type (ENUM: DataPolicyType) ........................................................................................................ 17

7.6 Remediation type (ENUM: RemediationType) ................................................................................................... 17

8 Change Requests and Fulfillment.............................................................................................................................. 18

8.1 Change item action type (ENUM: ChangetItemActionType) .............................................................................. 18

8.2 Change request item state (ENUM: ChangeRequestItemState)........................................................................ 18

8.3 Change request type (ENUM: ChangeRequestType) ........................................................................................ 19

8.4 Fulfillment process (ENUM: FulfillerProcess) .................................................................................................... 19

8.5 Fulfillment types (ENUM: FulfillmentType)......................................................................................................... 20

8.6 Provisioning status (ENUM: ProvisioningStatus) ............................................................................................... 20

8.7 Provisioning type (ENUM: ProvisioningType) .................................................................................................... 20

9 Collectors and Collector Templates ........................................................................................................................... 21

9.1 Collector status (ENUM: CollectorStatus) .......................................................................................................... 21

9.2 Collector type (ENUM: CollectorType) ............................................................................................................... 21

9.3 Template event type (ENUM: TemplateEventType) .......................................................................................... 21

9.4 Template state (ENUM: TemplateState) ............................................................................................................ 22

9.5 Template type (ENUM: TemplateType) ............................................................................................................. 22

10 Data Producers and Data Productions ...................................................................................................................... 22

10.1 Collection publish state (ENUM: CollectionPublishState) .................................................................................. 22

10.2 Data producer type (ENUM: DataProducerType) .............................................................................................. 22

10.3 Data production error type (ENUM: DataProductionErrType) ............................................................................ 23

10.4 Data production run state (ENUM: CollectionRunState) .................................................................................... 24

10.5 Data production status (ENUM: CollectionStatus) ............................................................................................. 25

11 Identity and Application Publication/Resolution, Curation .......................................................................................... 25

11.1 Curation execution type (ENUM: ExecutionType) ............................................................................................. 25

11.2 Data change type (ENUM: DataChangeType)................................................................................................... 25

11.3 Error severity (ENUM: ErrorSeverity)................................................................................................................. 26

Technical Reference 3
 11.4 Feed generation type (ENUM: FeedGenerationType) ....................................................................................... 26

11.5 Resolution anomaly type (ENUM: ResolutionAnomalyType) ............................................................................. 26

11.6 Unification anomaly type (ENUM: UnificationAnomaly) ..................................................................................... 26

11.7 Unification behavior (ENUM: UnificationBehavior) ............................................................................................ 27

12 Maintenance .............................................................................................................................................................. 27

12.1 Archival phase (ENUM: ArchivalPhase) ............................................................................................................ 27

12.2 Archive task (ENUM: ArchivalTask) ................................................................................................................... 27

12.3 Maintenance schedule types (ENUM: MaintScheduleType) .............................................................................. 28

12.4 Maintenance status (ENUM: MaintenanceStatus) ............................................................................................. 28

12.5 Maintenance wait state (ENUM: MaintenanceWaitState) .................................................................................. 28

12.6 Purgeable type (ENUM: PurgeableType) .......................................................................................................... 28

13 Miscellaneous ............................................................................................................................................................ 30

13.1 Analytics type (ENUM: AnalyticsType) .............................................................................................................. 30

13.2 Assignment type (ENUM: AssignmentType)...................................................................................................... 30

13.3 Coverage map type (ENUM: CoverageMapType) ............................................................................................. 30

13.4 Data source type (ENUM: DataSourceType) ..................................................................................................... 30

13.5 Entity type (ENUM: EntityType) ......................................................................................................................... 31

13.6 Group member type (ENUM: GroupMemberType) ............................................................................................ 33

13.7 Job schedule kind (ENUM: JobSchedule.Kind) ................................................................................................. 33

13.8 Job status (ENUM: JobStatus) .......................................................................................................................... 34

13.9 Owner type (ENUM: OwnerType) ...................................................................................................................... 34

13.10 Service status (ENUM: ArcServiceStatus) .................................................................................................... 34

13.11 Snapshot status (ENUM: SnapshotStatus) ................................................................................................... 35

13.12 Snapshot type (ENUM: SnapshotType) ........................................................................................................ 35

13.13 Time units (ENUM: TimeUnitType)................................................................................................................ 35

13.14 Verification task state (ENUM: VerifyTaskState) ........................................................................................... 36

14 Notification Templates ............................................................................................................................................... 36

14.1 Notification area type (ENUM: NotificationAreaType) ........................................................................................ 36

14.2 Notification content type (ENUM: NotificationContentType) .............................................................................. 36

14.3 Notification repeat type (ENUM: NotificationRepeatType) ................................................................................. 37

Technical Reference 4
15 Reviews ..................................................................................................................................................................... 37

15.1 Account relation type (ENUM: AccountRelationType) ....................................................................................... 37

15.2 Review expiration type (ENUM: ReviewExpirationType) ................................................................................... 37

15.3 Review item final decision (ENUM: ReviewItemDecision) ................................................................................. 37

15.4 Review item status (ENUM: ReviewItemStatus) ................................................................................................ 38

15.5 Review item type (ENUM: ReviewItemType) ..................................................................................................... 38

15.6 Review notification event (ENUM: ReviewNotificationEvent)............................................................................. 39

15.7 Review partial approval policy type (ENUM: ReviewPartialApprovalType) ........................................................ 39

15.8 Review start type (ENUM: ReviewStartType) .................................................................................................... 39

15.9 Review status (ENUM: ReviewStatus)............................................................................................................... 40

15.10 Review target data type (ENUM: ReviewTargetDataType) ........................................................................... 40

15.11 Review target type (ENUM: ReviewTargetType) ........................................................................................... 41

15.12 Review types (ENUM: ReviewType) ............................................................................................................. 41

15.13 Reviewer item action (ENUM: ReviewActionType)........................................................................................ 41

15.14 Reviewer item status (ENUM: ReviewTaskStatus)........................................................................................ 42

15.15 Reviewer type (ENUM: ReviewerType) ......................................................................................................... 43

15.16 Schedule review repeat (ENUM: ReviewRepeatAfterType) .......................................................................... 43

15.17 Self review policy type (ENUM: SelfReviewPolicyType)................................................................................ 43

16 Risk Calculation ......................................................................................................................................................... 44

16.1 Risk factor operation (ENUM: RiskFactorOperation) ......................................................................................... 44

16.2 Risk factor type (ENUM: RiskFactorType) ......................................................................................................... 44

16.3 Risk score status type (ENUM: RiskScoreStatusType) ..................................................................................... 44

16.4 Risk score type (ENUM: RiskScoreType) .......................................................................................................... 45

17 Technical Roles and SoD Policies ............................................................................................................................. 45

17.1 SoD case action type (ENUM: SodCaseActionType) ........................................................................................ 45

17.2 SoD case close reason (ENUM: SodCaseActionType) ..................................................................................... 45

17.3 SoD case state (ENUM: SodCaseState) ........................................................................................................... 45

17.4 SoD condition item type (ENUM: ConditionItemType) ....................................................................................... 46

17.5 SoD condition type (ENUM: SodConditionType) ............................................................................................... 46

17.6 Technical role and SoD detection status (ENUM: DetectionStatus) .................................................................. 46

Technical Reference 5
 17.7 Technical role approval state (ENUM: PolicyState) ........................................................................................... 47

17.8 Technical role assignment type (ENUM: TechRoleAssignmentType)................................................................ 47

17.9 Technical role risk mode (ENUM: RiskMode) .................................................................................................... 47

Index of ENUMs .................................................................................................................................................................. 48

Legal Notice ........................................................................................................................................................................ 50

Technical Reference 6
1 Introduction
This technical reference provides description of the internal ENUM values from the database that might appear in the
exported CSVs. Sections are in alphabetic order and sub-sections within each section are also arranged alphabetically.

2 Access Requests
This section documents ENUMs associated with access requests, access request and approval policies, and change
requests. A number of these ENUMs are used in other areas as well, but they are documented here as these are the
primary place they are used.

2.1 Access Request request status (ENUM: ResourceRequestStatus)

The status of the access request.

Database table reference: RESOURCE_REQUEST.REQUEST_STATUS

• REQUESTING - Request is being processed

• APPROVING – Request is in an approval queue

• APPROVING_PSODV – Approving potential SoD violation

• FULFILLING - Request is being fulfilled

• COMPLETED - Request is now complete

• CANCELED – User has cancelled the request

• ERROR_STARTING_REQUEST - Error occurred starting request

• ERROR_STARTING_APPROVAL - Error occurred starting approval workflow

• ERROR_STARTING_PSODV_APPROVAL - Error occurred starting potential SoD violation approval

2.2 Approval action in approval policy step (ENUM: ApprovalAction)

The types of actions that can be taken by certain events in an approval policy step – primarily if the approval policy step
times out.

Database table reference: ACCESS_APPROVAL_STEP.TIMEOUT_ACTION

• APPROVE – Approve the item request

• DENY – Deny the item request.

2.3 Item requester type (ENUM: ItemRequesterType)

Type of entity allowed to request a resource.

Technical Reference 7
Database table reference: ALLOWED_ITEM_REQUESTER.REQUESTER_TYPE

• USER – Allowed requester is a user.

• GROUP – Allowed requester is a user group.

• BUSINESS_ROLE – Allowed requester is a business role.

• ALL_USERS – All users are allowed to request the item.

2.4 Potential SoD violation approval task delete reason type (ENUM:
PsodvTaskDeleteReason)
Reasons that potential Sod violation approval tasks are deleted.

Database table reference: PSODV_APPROVAL_TASK.DELETE_REASON

• TASK_COMPLETED – Task completed.

• TASK_PSODV_CLEARED - Task was cleared.

• SOD_POLICY_DELETED – The SoD policy associated with the approval task was deleted.

• SOD_POLICY_DEACTIVATED – The SoD policy associated with the approval task was deactivated.

• SOD_POLICY_CHANGED – The SoD policy associated with the approval task changed.

2.5 Request item status (ENUM: RequestItemStatus)

The status of an access request item.

Database table reference: RESOURCE_REQUEST_ITEM.ITEM_APPROVAL_STATUS,

PSODV_APPROVAL_TASK_ITEM.DECISION, RESOURCE_REQUEST_ITEM_STEP.ITEM_APPROVAL_STATUS

• ERROR_STARTING_PSODV_APPROVAL – Error occurred starting potential SoD violation approval task.

• WAITING_PSODV_APPROVAL – Waiting for one or more potential SoD violation approvals.

• ERROR_STARTING_APPROVAL – Error occurred starting approval workflow.

• ERROR_STARTING_REQUEST – Error occurred starting a change set request.

• NO_DECISION – No decision has been made.

• TENTATIVE_APPROVED – Item has been approved, but decision is not yet final.

• TENTATIVE_DENIED – Item has been denied, but decision is not yet final.

• TENTATIVE_RETRACTED – Item has been marked as retracted. It will ultimately be changed to RETRACTED.
We only use this state internally so that we know to create the necessary approval step records when the step is
finished. Unlike the TENTATIVE_APPROVED and TENTATIVE_DENIED states, this state cannot be undone.

• APPROVED – Item has been marked as approved. Decision is final.

Technical Reference 8
 • DENIED – Item has been marked as denied. Decision is final.

• RETRACTED – Item has been retracted.

• CLEARED – Item has been cleared to move ahead to the next phase after all potential SoD violation approvals it
is part of are completed. The next phase will be either approval or fulfillment phases.

2.6 Request item value type (ENUM: DynamicParamDataType)

The data type for parameter values of a request item.

Database table reference: RESOURCE_REQUEST_ITEM_VALUE.DATA_TYPE

• EntitlementRef – Parameter value is an entitlement.

• Integer – Parameter is an integer.

• String – Parameter is a string.

• Boolean – Parameter is a Boolean.

• List – Parameter is a list of values.

2.7 User type in approval policy step (ENUM: UserType)

The type of user for approvers, reminder CCs, reminder BCCs, and escalators in an approval policy step.

Database table reference: ACCESS_APPROVAL_STEP.APPROVER_TYPE,

ACCESS_APPROVAL_STEP.REMINDER_CC_TYPE, ACCESS_APPROVAL_STEP.REMINDER_BCC_TYPE,
ACCESS_APPROVAL_STEP.ESCALATOR_TYPE.

• SUPERVISOR – Supervisor of user the resource is being requested for.

• ITEM_OWNER – Owner of the resource being requested.

• USERS_AND_GROUPS – Specific user and/or group.

• COVERAGE_MAP – Coverage map specifies the users.

3 Applications
This section documents ENUMs associated with applications.

3.1 Application type (ENUM: ApplicationType)

License type for application.

Database table references: APP_HIST.TYPE, APPLICATION.TYPE

• ENTERPRISE – Enterprise application.

Technical Reference 9
 • IDM – IDM application.

• IDMPROV – IDM provisioning application.

3.2 Cost type for application (ENUM: CostType)

Cost type for application.

Database table references: APP_CURATED.COST_TYPE, APP_HIST.COST_TYPE, APPLICATION. COST_TYPE,

CAPPLICATION. COST_TYPE

• YEARLY – Yearly cost.

• MONTHLY – Monthly cost.

• WEEKLY – Weekly cost.

• DAILY – Daily cost.

• ONE_TIME – One time cost.

• UNDEFINED – Undefined cost type.

3.3 Currency type for application (ENUM: Currency)

Currency type for application.

Database table references: APP_CURATED.CURRENCY, APP_HIST.CURRENCY, APPLICATION. CURRENCY,

CAPPLICATION. CURRENCY

• USD – US dollar.

• EUR – European euro.

• GBP – United Kingdom pound.

• JPY – Japanese yen.

• BRL – Brazil real.

• CNY – China yuan renminbi.

• UNDEFINED – Undefined.

3.4 License type for application (ENUM: LicenseType)

License type for application.

Database table references: APP_CURATED.LICENSE_TYPE, APP_HIST.LICENSE_TYPE,

APPLICATION.LICENSE_TYPE, CAPPLICATION.LICENSE_TYPE

• PERSONAL – Personal license.

Technical Reference 10
 • CORPORATE – Corporate license.

• SITE – Site license.

• PARTNER – Partner license.

• SHARED – Shared license.

• UNDEFINED – License type not defined.

4 Attribute Definition
This section documents ENUMs associated with attribute definitions.

4.1 Attribute data type (ENUM: AttributeDataType)

Data type of an attribute definition.

Database table references: ATTRIBUTE_DEFINITION.ATTRIBUTE_DATA_TYPE, ATTRIBUTE_VALUE.TYPE,

REVIEW_ITEM_ATTR_VALUE.ATTR_DATA_TYPE

• STRING - String

• LONG – Long integer number

• DOUBLE – Double precision floating point number

• BOOLEAN – Boolean

• DATE – Date

• LOCALE – Locale

• COMPOSITE - Composite

4.2 Attribute state (ENUM: AttributeState)

State of an attribute definition.

Database table references: ATTRIBUTE_DEFINITION.ATTRIBUTE_STATE

• ACTIVE – Attribute definition is active.

• DELETED – Attribute definition is deleted.

• INACTIVE – Attribute definition is not active.

4.3 Attribute type (ENUM: AttributeType)

Type of an attribute definition.

Technical Reference 11
Database table references: ATTRIBUTE_DEFINITION.ATTRIBUTE_TYPE

• COLLECTED – Attribute is populated by collection.

• DERIVED – Attribute is derived, meaning it is collected and has a specific mapping, join rule that will be resolved
after collection.

• ARC_MANAGED – Attribute can be determined at runtime by the IG server.

• CONFIGURED – Attribute is used for configuration or preferences, but is never collected.

• INTERNAL – Attribute is used internally.

• COMPOSITE – Attribute is used to combine several attributes.

• TRANSIENT – Attribute holds a calculated transient value that is not stored in the database.

5 Authorization
This section documents ENUMs associated with authorization features.

5.1 Authorization permission type (ENUM: AuthPermType)

Authorization permission types.

Database table references: AUTH_PERMISSION.AUTH_PERM_TYPE NOTE: The values in these columns are the
ordinal value of the enum, not the string value. The ordinal value is shown below with each enum.

• NAVIGATION_AUTH_PERMISSION (0) – Navigation authorization permission.

• REST_API_AUTH_PERMISSION (1) – Rest API authorization permission.

• DATA_AUTH_PERMISSION (2) – Data authorization permission.

5.2 Authorization role type (ENUM: AuthRoleType)

Authorization role types.

Database table references: AUTH_ROLE.ROLE_TYPE NOTE: The values in these columns are the ordinal value of the
enum, not the string value. The ordinal value is shown below with each enum.

• GLOBAL (0) – Global authorization role – can be assigned through UI.

• RUNTIME (1) – Runtime authorization role – assigned when user matches specified criteria.

5.3 Authorization roles (ENUM: AuthRole.Roles)

Authorization roles

Database table references: AUTH_ROLE.ROLE_NAME

Technical Reference 12
• ADM – Global administrator.

• RA – Review administrator.

• DA – Data administrator.

• PA – Provisioning administrator.

• SO – Security officer.

• AU – Auditor

• RT_RO – Review owner.

• RT_RA – Review auditor.

• RT_RM – Review monitor.

• RT_RV – Reviewer.

• RT_ER – Escalation reviewer.

• RT_AA – Application administrator.

• RT_AO – Application owner.

• RT_ACF – Application access change fulfiller.

• RT_CIF – Catalog item fulfiller.

• RT_ROLE_USER – Logged in user (is mapped against published catalog user).

• RPTA – Reporting administrator.

• RT_HIST_RO – Historical review owner.

• RLA – Technical roles administrator.

• RT_RLO – Technical role owner.

• SODA – SoD policy administrator.

• RT_SODO – SoD policy owner.

• RT_HRV – Historic reviewer.

• RT_CRF – Exception change set fulfiller.

• RT_HRA – Historical review auditor.

• BRA – Business role administrator.

• RT_BRO – Business role owner.

• RT_BRAPRV – Business role approver.

• RT_BRM – Business role manager.

• RT_BRF – Business role fulfiller.

Technical Reference 13
 • ARA – Access request administrator.

• DQA – Data query administrator.

5.4 Authorization scope type (ENUM: AuthScopeType)

Authorization scope types.

Database table references: AUTH_SCOPE.SCOPE_TYPE. NOTE: The values in these columns are the ordinal value of
the enum, not the string value. The ordinal value is shown below with each enum.

• ALL (0) – Scope is everything.

• APPLICATION (1) – Scoped by application.

• REVIEW_INST (2) – Scoped by review instance.

• REVIEW_DEF (3) – Scoped by review definition.

• NAV_ITEM (4) – Scoped by navigation item.

• REST_API (5) – Scoped by REST API.

• CHANGE_REQUEST_ITEM (6) – Scoped by change request.

• SOD_POLICY (7) – Scoped by SoD policy.

• ROLE_POLICY (8) – Scoped by technical role policy.

• ADVISOR_FEED (9) – Scoped by advisor feed definition.

• BUSINESS_ROLE (10) – Scoped by business role.

• APPROVAL_POLICY (11) – Scoped by business role approval policy.

• RISK_SCORE_CFG (12) – Scoped by risk score configuration.

• ENTITY_CATEGORY (13) – Scoped by entity category.

• ANALYTICS (14) – Scoped by analytics fact.

• DATA_POLICY (15) – Scoped by data policy.

• CERTIFICATION_POLICY (16) – Scoped by certification policy.

6 Business Roles and Business Role Approval Policies

This section documents ENUMs associated with business role policies and business role approval policies.

6.1 Business role approval policy type (ENUM: ApprovalPolicyType)

Type of business role approval policy.

Technical Reference 14
Database table reference: APPROVAL_POLICY.TYPE

• SYSTEM – Factory shipped (system) approval policy.

• CUSTOM – Custom approval policy.

6.2 Business role approval state (ENUM: ApprovalState)

State of a business role.

Database table reference: BUSINESS_ROLE.APPROVAL_STATE

• DRAFT – The assigned approval policy requires approval and the administrator has not submitted the changes
for approval.

• REJECTED – The approver denies approval of a business role.

• PENDING_APPROVAL – Pending changes are ready for approval by the approver specified in the approval
policy.

• APPROVED – The approver approved the business role, but the business role has not yet been published.

• PUBLISHED - Business role is approved and the administrator has published the role.

• ARCHIVE – Business role has been deleted or a newer version has been created.

• MINED - The mining process created the business role and the administrators must promote it before they or
others can approve (depending on the approval policy) and publish it.

6.3 Business role detection status (ENUM: BusinessRoleDetectionStatus)

Detection status for a business role.

Database table reference: BUSINESS_ROLE.DETECT_STATUS

• IN_PROGRESS – The business role detection is in progress

• ERROR – The business role detection failed

• COMPLETED – The last business role detection completed

• CANCELED – The last business role detection was canceled

6.4 Resource type (ENUM: BusinessRoleItemType)

Types of resources that can be requested via access request or authorized via a business role.

Database table references: RESOURCE_REQUEST_ITEM.ITEM_TYPE, ACCESS_APPROVAL_ITEM.ITEM_TYPE,

ACCESS_REQUEST_ITEM.ITEM_TYPE, AUTO_CHANGE_REQUEST.RESOURCE_TYPE,
BR_DETECT_AUTH.RESOURCE_TYPE, BR_DETECT_AUTO_REQUEST.RESOURCE_TYPE,

Technical Reference 15
BUSINESS_ROLE_INCL_ITEM.ITEM_TYPE, USER_RESOURCE.RESOURCE_TYPE,
USER_RESOURCE_CHECK.RESOURCE_TYPE

• TECHNICAL_ROLE- Resource is a technical role

• PERMISSION – Resource is a permission

• APPLICATION – Resource is an application

7 Certification Policies and Data Policies

This section documents ENUMs associated with data policies and certification policies

7.1 Certification policy status (ENUM: CertificationPolicyStatus)

Certification policy statuses.

Database table reference: CERTIFICATION_POLICY.STATUS

• NOT_CERTIFIED – Some entities covered by the certification policy are not reviewed.

• CERTIFIED – All entities covered by the certification policy are completely reviewed.

7.2 Certification policy violation status (ENUM: CertPolicyViolationStatus)

Certification policy violation statuses.

Database table reference: CERT_POLICY_VIOLATION.VIOLATION_STATUS

• ACTIVE – Violation exists.

• RESOLVED – Violation has been resolved.

7.3 Certification policy violation type (ENUM: CertPolicyViolationType)

Certification policy violation types

Database table reference: CERT_POLICY_VIOLATION.VIOLATION_TYPE,

CERT_POLICY_VIOLATION_COUNT.VIOLATION_TYPE, REMEDIATION_VIO_TYPE.VIOLATION_TYPE

• NO_DECISION – Review is certified, review item does not have a final decision.

• NOT_REVIEWED – Review item is in the target criteria, but is not covered by any of the review instances.

• REVIEW_IN_PROGRESS – Review is in the target criteria, but is not covered by any of the review instances
and a review instance is in progress now.

• OVERDUE – Review item is in an expired review.

• OVERDUE_NO_DECISION – Review item is in expired review with no final decision.

Technical Reference 16
 • ANY_DECISION – Only used internally – review item with ANY decision.

• NO_DECISION_REVIEW_IN_PROGRESS – Review instance is in progress and the item was reviewed before
with no final decision.

• OVERDUE_REVIEW_IN_PROGRESS – Review instance is in progress and the item is expired.

• OVERDUE_NO_DECISION_REVIEW_IN_PROGRESS – Review instance is in progress and the item is expired

with no final decision.

• PARTIAL_APPROVED – Internal usage – partial approved review item in running review.

7.4 Data policy criteria type (ENUM: DataPolicyCriteriaType)

Types of data policy criterias.

Database table references: DATA_POLICY.CRITERIA_TYPE

• COUNT – Count criteria.

• CRITERIA – Simple criteria.

• ENTITY_CHANGE – Entity change criteria.

• VALUE_CHANGE – Value change criteria.

7.5 Data policy type (ENUM: DataPolicyType)

Types of data policies.

Database table references: DATA_POLICY.POLICY_TYPE

• COLLECTION – Collection data policy.

• PUBLICATION – Publication data policy.

7.6 Remediation type (ENUM: RemediationType)

Remediation types.

Database table reference: CERTIFICATION_POLICY.REMEDIATION_TYPE,

CERT_POLICY_VIOLATION.REMEDIATION_TYPE, DATA_POLICY.REMEDIATION_TYPE,
DATA_POLICY_VIOLATION.REMEDIATION_TYPE

• EMAIL_NOTIFICATION – Send email notification.

• CHANGE_REQUEST – Generate a change request.

• MICRO_CERTIFICATION – Run a micro certification.

Technical Reference 17
8 Change Requests and Fulfillment
This section documents ENUMs associated with change requests and fulfillment processes. Many of these are also used
in access request processes.

8.1 Change item action type (ENUM: ChangetItemActionType)

Actions taken on change requests.

Database table reference: CHANGE_ITEM_ACTION.ACTION

• PENDING – pending fulfillment

• FULFILLED - Request has been fulfilled

• REFUSED – Fulfiller chose to not fulfill this request, instead left permission as is

• SKIPPED – Skipped action.

• REASSIGNED – Item is re-assigned

• TIMED_OUT – item timed out

8.2 Change request item state (ENUM: ChangeRequestItemState)

Change request item state.

Database table reference: CHANGE_ITEM_ACTION.CHANGE_ITEM_STATUS

• INITIALIZED – The change request item is created and provisioning has not been initiated

• IN_PROGRESS – Provisioning is in progress

• COMPLETED – Provisioning has been successfully completed

• REFUSED – Manual fulfiller has refused to provision the item

• PENDING - Provisioning workflow has been invoked

• TIMED_OUT – Provisioning workflow timed out

• ERROR – An error was encountered

• RETRY – Change item is in retry state

• VERIFIED – Provisioning changes in the application for the change item has been successfully verified

• NOT_ VERIFIED – Provisioning changes in the application for the change item has not been successfully
verified

• VERIFICATION_IGNORED – Closed-loop verification for this change item is not done

• VERIFICATION_TIMEOUT – item timed out

Technical Reference 18
8.3 Change request type (ENUM: ChangeRequestType)
Change request types.

Database reference: AUTO_CHANGE_REQUEST.CHANGE_REQUEST_TYPE,

CHANGE_REQUEST_ITEM.CHANGE_REQUEST_TYPE

• REMOVE_BUS_ROLE_ASSIGNMENT – Remove user from business role.

• ADD_USER_TO_ACCOUNT – Add user to an account.

• REMOVE_PERMISSION_ASSIGNMENT – Remove permission assignment from user.

• REMOVE_ACCOUNT_ASSIGNMENT – Remove user-account assignment.

• MODIFY_PERMISSION_ASSIGNMENT – Modify user-permission assignment.

• MODIFY_ACCOUNT_ASSIGNMENT – Modify user-account assignment.

• MODIFY_TECH_ROLE_ASSIGNMENT – Modify user-technical role assignment.

• REMOVE_ACCOUNT – Remove account.

• ADD_PERMISSION_TO_USER – Assign a permission to a user.

• ADD_APPLICATION_TO_USER – Assign the user to an account in an application.

• REMOVE_APPLICATION_FROM_USER – Remove user from their accounts in an application.

• ADD_TECH_ROLE_TO_USER – Assign a user a technical role.

• REMOVE_ACCOUNT_PERMISSION – Remove permission assignment from an account.

• MODIFY_ACCOUNT – Modify account.

• MODIFY_USER_PROFILE – Modify user profile.

• MODIFY_USER_SUPERVISOR – Change user’s supervisor.

• DATA_VIOLATION_USER – Data violation for a user.

• DATA_VIOLATION_PERMISSION – Data violation for permission.

• DATA_VIOLATION_ACCOUNT – Data violation for account.

• CERTIFICATION_POLICY_VIOLATION – Certification policy has been violated.

• MODIFY_BUS_ROLE_DEFN – Modify business role definition.

• REMOVE_TECH_ROLE_ASSIGNMENT – Remove a technical role assignment from a user.

8.4 Fulfillment process (ENUM: FulfillerProcess)

Types of fulfillment processes used to fulfill a change request.

Database table reference: CHANGE_ITEM_ACTION.FULFILLER_PROCESS

• MANUAL – Fulfilled manually

Technical Reference 19
 • DAAS - Fulfilled by DaaS fulfillment target, examples are Service Now, BMC Remedy, edir or AD LDAP
fulfillment, generic REST/SOAP

• IDENTITY_MANAGER – Fulfillment automatically via NetIQ Identity Manager

• EXTERNAL_WORKFLOW – Fulfilled by a NetIQ Identity Manager Provisioning Request workflow

8.5 Fulfillment types (ENUM: FulfillmentType)

Fulfillment types.

Database table reference: FULFILLMENT_INFO.TYPE

• MANUAL – Fulfillment is done manually.

• IDMWF – Fulfillment is done via IDM workflow.

• EXTERNAL – Fulfillment is done via external IDM workflow.

• DAAS – Fulfillment is done via DAAS.

8.6 Provisioning status (ENUM: ProvisioningStatus)

Provisioning status.

Database table references: CHANGE_SET.STATUS

• INITIALIZED – Change set has been generated for the provisioning to start.

• PENDING – Workflow process has been started and waiting for completion.

• PARTIAL – Partial completion.

• COMPLETED – Fulfillment is completed and provisioning workflow has completed.

• TIMED_OUT – Workflow has timed out.

• ERROR – An error has occurred.

8.7 Provisioning type (ENUM: ProvisioningType)

Provisioning fulfillment type for change requests.

Database reference: CHANGE_REQUEST_ITEM.PROVISIONING_TYPE

• AUTO – Auto provisioning – only applicable for change requests on permissions assigned via IDM.

• MANUAL – Manual provisioning is used for systems which require administrative intervention to complete
change requests.

• EXTERNAL – Custom provisioning via IDM workflow.

• DAAS – DaaS provisioning via Daas fulfillment connector.

Technical Reference 20
9 Collectors and Collector Templates
This section documents ENUMs associated with collectors and collector templates.

9.1 Collector status (ENUM: CollectorStatus)

Collector status.

Database table references: AUTO_CURATOR.STATUS, DATA_COLLECTOR.STATUS

• ACTIVE – Collector is active and functional.

• INACTIVE – Collector has been deactivated and collections cannot be run.

• DISABLED – Collection has been disabled.

9.2 Collector type (ENUM: CollectorType)

Collector types.

Database table references: DATA_COLLECTION.COLLECTOR_TYPE, DATA_COLLECTOR.TYPE,

DATA_TEST_COLLECTION.COLLECTOR_TYPE, ENTITY_ATTRIBUTE_JOIN.COLLECTOR_TYPE,
ENTITY_ATTRIBUTE_JOIN_HISTORY.COLLECTOR_TYPE, TEMPLATE.COLLECTOR_TYPE

• IDENTITY – Identity collector.

• ACCOUNT – Account collector.

• ROLE – Role collector.

• APPLICATION – Application collector.

• PERMISSION – Permission collector.

• FULFILLMENT – Fulfillment target.

• SYSTEM_FULFILLMENT – System fulfillment target.

• CURATION – Pseudo-collector for curation records.

• GRAVEYARD – Pseudo-collector for graveyard records.

• APP_COLLECTOR – Collector of application entities.

• HISTORY – Pseudo-collector for history records.

9.3 Template event type (ENUM: TemplateEventType)

Template event types.

Database table references: TEMPLATE.EVENT

Technical Reference 21
 • CREATED – Template creation event.

• UPDATED – Configuration update event.

• ACTIVATED – Template activated event.

• DEACTIVATED – Template deactivated event.

• DELETED – Template deleted event.

9.4 Template state (ENUM: TemplateState)

Template states

Database table references: TEMPLATE.STATE

• CREATED – Template creation event.

• UPDATED – Configuration update event.

9.5 Template type (ENUM: TemplateType)

Template types.

Database table references: TEMPLATE.TYPE

• DEFAULT – Factory shipped template.

• CUSTOM – Custom template.

10 Data Producers and Data Productions

This section documents ENUMs associated with data producers and data productions.

10.1 Collection publish state (ENUM: CollectionPublishState)

Collection publish states.

Database table references: AUTO_CURATION.PUBLISH_STATE, DATA_COLLECTION.PUBLISH_STATE

• COLLECTED – Collection has been collected, but not published yet.

• PUBLISHED – Collection has been collected and published.

• DISCARDED – Collection has been discarded – not currently used.

10.2 Data producer type (ENUM: DataProducerType)

Types of data producers.

Technical Reference 22
Database table references: DATA_PRODUCER.DATA_PRODUCER_TYPE,
DATA_PRODUCTION.DATA_PRODUCER_TYPE

• COLLECTOR – Producer that does a collection.

• UNIFIER – Producer does unification publication.

• RESOLVER – Producer does application publication.

• CURATOR – Producer does curation.

• AUTOCURATOR – Producer does auto curation.

• PROVISIONING – Producer does auto provisioning.

• VERIFICATION – Producer does provisioning verification.

• START_REVIEW – Producer starts a review.

• SCHEDULER – Producer starts or finishes a scheduled job.

• DATA_SOURCE_COLLECTORS – Represents ALL collectors for a given data source.

• ADVISOR_FEED – Producer to generate CSV for bulk curation.

• ADVISOR_FEED_CURATION – Producer does curation of CSVs for bulk curation.

• RISK_SCORE_CALCULATION – Producer that does risk score calculation.

• BUSINESS_ROLE_MEMBERSHIP – Producer that does business role detection.

• DATA_SOURCE_TEST_COLLECTORS – Represents ALL test collectors for a given data source.

• TEST_COLLECTOR – Producer that does a test collection.

• POLICY_DETECTION - Producer does technical role or SoD detection.

• CERT_POLICY_CALCULATION – Producer does certification policy calculation.

• RTC_EVENT_INGESTION – Producer does real time data collection.

• MORTICIAN – Producer that is assigned to entities which are moved to the graveyard.

• DATA_POLICY_CALCULATION – Producer that does data policy calculation.

• HISTORIAN – Producer that is assigned to entities that are historical entities.

10.3 Data production error type (ENUM: DataProductionErrType)

Types of errors that can occur during collection or curation.

Database table references: COLLECTION_ERROR.ERROR_TYPE, CURATION_ERROR.ERROR_TYPE

• TRANSFORM_BASE_ENTITY_ERROR – Entity transformation failed in creating collected entity.

• TRANSFORM_VALIDATION_ERROR – Entity transformation failed in validating the collected entity.

Technical Reference 23
 • TRANSFORM_TRANSFORM_ERROR – Entity transformation failed in transforming the collected entity.

• TRANSFORM_PERSISTENCE_ERROR – Entity transformation failed in saving the collected entity to the

database.

• AUTO_CURATION_VALIDATION_ERROR – Error occurred during auto-curation processing.

10.4 Data production run state (ENUM: CollectionRunState)

These are the various run states that might occur while a data production is running (status = RUNNING).

Database table reference: DATA_PRODUCTION.RUN_STATE

• PENDING – Production is pending.

• READY_PHASE_1 – Production is ready to run phase 1.

• RUN_PHASE_1 – Production is scheduled to run phase 1.

• RUNNING_PHASE_1 – Production is running phase 1.

• ERR_PHASE_1 – Phase 1 ended in an error.

• DONE_PHASE_1 – Phase 1 is completed.

• RUN_PHASE_2 – Production is scheduled to run phase 2.

• RUNNING_PHASE_2 – Production is running phase 2.

• ERR_PHASE_2 – Phase 2 ended in an error.

• DONE_PHASE_2 – Phase 2 is completed.

• CANCEL_EXECUTING – Request has been made to cancel the production.

• CANCEL_PHASE_1 – Request has been made to cancel phase 1.

• CANCELLING_PHASE_1 – Phase 1 is in the process of cancelling.

• CANCEL_PHASE_2 – Request has been made to cancel phase 2.

• CANCELLING_PHASE_2 – Phase 2 is in the process of cancelling.

• COMPLETE – Phases have completed successfully.

• STOPPED – Production was stopped.

• CANCEL_EXECUTION_FAILED – Cancel request failed.

• TERMINATE_EXECUTING – Production is terminating.

• TERMINATED – Production terminated.

• TERMINATE_FAILED – Production termination failed.

Technical Reference 24
10.5 Data production status (ENUM: CollectionStatus)
Statuses for data productions.

Database table reference: DATA_PRODUCTION.STATUS, DATA_COLLECTOR.LAST_COLLECTION_STATUS,

DATA_PRODUCTION_SUMMARY.DPN_STATUS

• RUNNING – Production is running.

• CANCEL_REQUESTED – A request has been made to cancel the production.

• CANCEL_PENDING – Production is pending cancelation.

• TERMINATE_PENDING – Production is pending termination.

• CANCELLED – Production was cancelled.

• FAILED – Production failed.

• COMPLETED – Production completed successfully.

• TERMINATED – Production was terminated, did not complete.

• PENDING – Production is pending – not yet running.

• BULK_DETECTION – Production is part of a bulk production. This production is not yet running. It will be
performed by another pending production.

11 Identity and Application Publication/Resolution, Curation

This section documents ENUMs associated with identity and application publication/resolution and curation.

11.1 Curation execution type (ENUM: ExecutionType)

Type of execution to perform for auto curation.

Database table references: AUTO_CURATION.EXECUTION_TYPE

• INLINE – Execute curation inline with the thread that created the curation.

• BATCH – Execute curation as a separate thread.

11.2 Data change type (ENUM: DataChangeType)

Types of entity change records.

Database table references: ACCOUNT_CHANGE.CHANGE_TYPE, ENTITY_CHANGE.CHANGE_TYPE,

PERMISSION_CHANGE.CHANGE_TYPE

• ADDED – Entity was added.

• REMOVED – Entity was removed.

Technical Reference 25
 • ALTERED – Entity was altered.

• UNLINKED – Entity’s application was deleted or exportToIDM was set to false.

• LINKED – Entity’s application exportToIDM was set to true.

11.3 Error severity (ENUM: ErrorSeverity)

Severity of errors that can occur during collection or curation.

Database table references: COLLECTION_ERROR.SEVERITY, CURATION_ERR_ATTRIBUTE.SEVERITY,

CURATION_ERROR.SEVERITY, ERROR_ATTRIBUTE.SEVERITY

• FATAL – Fatal error, unable to continue.

• ERROR – Error, trying to continue.

• WARNING – Warning, able to continue.

• INFO – Information

11.4 Feed generation type (ENUM: FeedGenerationType)

Type of advisor feed generation.

Database table references: ADVISOR_FEED.FEED_GENERATION_TYPE

• MANUAL – Manual data feed template generation.

• PRODUCTION – Production event data feed template generation.

11.5 Resolution anomaly type (ENUM: ResolutionAnomalyType)

Types of resolution anomalies.

Database table references: RESOLUTION_ANOMALY.TYPE

• NONMATCHING_DRIVER_ID – The permission or account driver ID value does not match the driver ID of the
collected provisioning application.

• NONMATCHING_LOGICAL_ID – The permission or account driver ID value is valid, but the logical ID value
does not match the logical ID of the collected provisioning application.

11.6 Unification anomaly type (ENUM: UnificationAnomaly)

Types of unification anomalies.

Database table references: UNIFICATION_ANOMALY.PROBLEM

Technical Reference 26
 • NONMATCHING_UNIQUE_ID – Unification paired a collected user with an existing unique user ID to a
published user with a different unique user ID. This means that the unification results were different than some
previous unification.

• MULTIPLE_MATCHES – Unification paired a collected user with more than one published user.

• UNMATCHED_BUT_SAME_UNIQUE_ID – Unification did NOT pair a collected user with a published user with
the same unique user ID. This indicates that the collected user used to unify, but no longer does.

11.7 Unification behavior (ENUM: UnificationBehavior)

Type of unification to do for an identity data source during identity publication.

Database table references: IDENTITY_SOURCE.UNIFICATION_BEHAVIOR

• MERGEABLE – Identities can be merged with identities from other mergeable identity data sources as specified
by join attributes.

• UNIQUE – Identities will not be merged with identities from other identity data sources.

• IGNORED – Identities from data source will not be published.

12 Maintenance
This section documents ENUMs associated with maintenance activities – archiving, cleanup, etc.

12.1 Archival phase (ENUM: ArchivalPhase)

Phase that a running archival process is currently in. This only applies when the archival task is a normal archival
process.

Database table reference: ARCHIVAL.ARCHIVAL_PHASE

• UPDATING_STATISTICS – Archival is updating database statistics.

• ESTIMATING_WORK_TODO – Archival is estimating the amount of work to do.

• CLEARING_ARCHIVE_TABLES – Archival is clearing or creating archive tables.

• ARCHIVING – Archival is archiving data.

12.2 Archive task (ENUM: ArchivalTask)

High level task that was performed by an archival process.

Database table references: ARCHIVAL.ARCHIVE_TASK

• ARCHIVE – Task was the normal archival process.

Technical Reference 27
 • DISABLE – Task was to disable archiving.

• ENABLE – Task was to enable archiving.

12.3 Maintenance schedule types (ENUM: MaintScheduleType)

Types of maintenance schedules.

Database table reference: MAINTENANCE_SCHEDULE.SCHEDULE_TYPE

• ARCHIVE – Archive only schedule.

• CLEANUP – Cleanup only schedule.

• ARCHIVE_AND_CLEANUP – Archive and cleanup schedule.

12.4 Maintenance status (ENUM: MaintenanceStatus)

Status of archival or cleanup processes and sub-processes.

Database table references: ARCHIVAL.STATUS, ARCHIVAL_TABLE.STATUS,

ARCHIVE_DISABLE_ENABLE.STATUS, ARCHIVE_DISABLE_ENABLE_TABLE.STATUS, CLEANUP.STATUS,
CLEANUP_ENTITY.STATUS, CLEANUP_ENTITY_INSTANCE.STATUS

• PENDING – Process or sub-process is pending – has not yet started.

• RUNNING – Process or sub-process is currently running.

• COMPLETED – Process or sub-process completed successfully.

• CANCELED – Process or sub-process was canceled.

• CANCELING – Process or sub-process is being canceled.

• FAILED – Process or sub-processed failed with some kind of error.

12.5 Maintenance wait state (ENUM: MaintenanceWaitState)

The wait state for maintenance after archiving or after cleanup.

Database table references: MAINTENANCE_INFO.WAIT_STATE

• WAIT_CONTINUE_OR_EXIT – Wait for the user to continue or exit.

• WAIT_EXIT – Wait for the user to exit.

12.6 Purgeable type (ENUM: PurgeableType)

Types of data that can be purged (cleaned up).

Technical Reference 28
Database table references: CLEANUP.CURR_ENTITY_TYPE, CLEANUP_ENTITY.ENTITY_TYPE,
CLEANUP_ENTITY_ITEM.ENTITY_TYPE

• REVIEW_DEFINITION – Review definitions

• REVIEW_INSTANCE – Review instances

• SOD_POLICY – SoD policies

• SOD_CASE – SoD cases

• ROLE_POLICY – Technical role policies

• SNAPSHOT – Snapshots

• DATA_SOURCE – Identity data source or application data sources

• COLLECTION – Identity or application collections

• ADVISOR_FEED – Bulk update data artifacts

• BUSINESS_ROLE – Business roles

• RISK_SCORE_STATUS – Risk score statuses

• ENTITY_CATEGORY – Categories

• ACCESS_REQUEST – Access requests

• ACCESS_REQUEST_POLICY – Access request policies

• ACCESS_REQUEST_APPROVAL_POLICY – Access request approval policies

• CERTIFICATION_POLICY – Certification policies

• ANALYTICS_FACT – Analytics facts

• UNREGISTERED_FACT – Unregistered facts

• DATA_POLICY – Data policies

• BUSINESS_ROLE_MEMBERS – Business role member records created by business role detection.

• BUSINESS_ROLE_AUTHORIZATION – Business role authorization records created by business role detection.

• RTC_BATCH – Real time collection batches

• AUTO_FULFILLMENT_REQUEST – Auto fulfillment requests generated by business role detection

• APP_HISTORY – Application history records

• ROLE_USER_ASSIGNMENTS – Technical role user assignments

• SOD_DETECTION – SoD violation records

• CERTIFICATION_POLICY_VIOLATION – Certification policy violations

• DATA_POLICY_VIOLATION – Data policy violations

Technical Reference 29
 • REMEDIATION_RUN – Remediation runs

13 Miscellaneous
This section documents miscellaneous ENUMs that do not fit nicely in any other category.

13.1 Analytics type (ENUM: AnalyticsType)

Analytics type.

Database table references: PIVOT_TABLE_CONFIG.ANALYTICS_TYPE

• ACCOUNT – Account statistics.

• PERMISSION – Permission statistics.

13.2 Assignment type (ENUM: AssignmentType)

Assignment types.

Database table references: CPERMISSION_HOLDER.ATYPE, REVIEW_ITEM.ASSIGNMENT_TYPE,

SACCOUNT_PERMISSION.ATYPE. NOTE: The values in these columns are the ordinal value of the enum, not the
string value. The ordinal value is shown below with each enum.

• DIRECT (0) – Directly assigned.

• IMPLICIT (1) – Implicitly assigned via membership in a group, container, provisioning role or other grouping.

• INHERITED (2) – Inherited via permission hierarchy.

• UNKNOWN (3) - Unknown

13.3 Coverage map type (ENUM: CoverageMapType)

Type of coverage map.

Database table references: COVERAGE_MAP.TYPE

• REVIEW – Review coverage map.

• REQUEST – Request coverage map.

13.4 Data source type (ENUM: DataSourceType)

Types of data sources.

Database table references: ADVISOR_FEED.SOURCE_TYPE, DATA_POLICY.DATA_SOURCE_TYPE,

DATA_SOURCE.DATA_SOURCE_TYPE, SCHEDULE_DATA_SOURCE.DS_TYPE

Technical Reference 30
 • APPLICATION – Application data source.

• IDENTITY – Identity data source.

• FULFILLMENT – Fulfillment target.

• SYSTEM_FULFILLMENT – System fulfillment target.

• APP_COLLECTOR_SOURCE – Application definition data source (CMDB).

13.5 Entity type (ENUM: EntityType)

Entity types.

Database table reference: Many tables have an ENTITY_TYPE column or something similar to specify an entity type.

• USER – User.

• GROUP – Group.

• ACCOUNT – Account.

• ACCOUNT_USER – Account’s user.

• PERMISSION – Permission.

• PERMISSION_TO_HOLDERS – Permissions based on permission to account or user.

• PERMISSIONS_FROM_HODLER – Permission based on accounts or users to permissions.

• PERMISSION_HIERARCHY_TO_CHILD – Permission hierarchy based on parent to child.

• PERMISSION_HIERARCHY_TO_PARENT – Permission hierarchy based on child to parent.

• GROUPMEMBERSHIP – Group membership (user) to be collected from JDBC systems.

• GROUPTOGROUP – Group membership to be collected from JDBC systems.

• REVIEW_DEFINITION – Review definition.

• REVIEWINSTANCE – Review instance.

• APPLICATION – Application.

• IDENTITY_SOURCE – Identity source.

• IDMDRIVER – Deprecated – should now be CAPPLICATION.

• NAV_ITEM – Navigation item.

• REVIEW_ACT_ITEM – Review item.

• ATTRIBUTE_DEFINITION – Attribute definition.

• DATA_SOURCE – Data source.

• ENTITY_SCHEMA – View schema.

Technical Reference 31
• CHANGE_REQUEST_ITEM – Change request item.

• TAG – Tag.

• AUTH_ROLE – Authorization role.

• SCHEDULE – Schedule

• ROLE_POLICY – Technical role policy.

• SOD_POLICY – SoD policy.

• ACCOUNT_CATEGORY – Account classification.

• SOD_CASE – Sod case.

• ADVISOR_FEED – Advisory feed.

• BUSINESS_ROLE – Business role.

• APPROVAL_POLICY – Approval policy.

• GOVERNANCE – Governance organization.

• COVERAGE_MAP – Coverage map.

• RISK_SCORE_CFG – Risk score configuration.

• ANALYTICS – Analytics.

• ENTITY_CATEGORY – Entity category.

• AFFILIATED_USER – Affiliated user.

• SUPERVISING_USER – Supervising user.

• HOLDER_USER – Permission holder user.

• PERMISSION_BOUND – Permission bounded by permissions.

• SUB_PERMISSION – Sub permission for permission.

• SUBORDINATE_APP – Subordinate application.

• SUB_GROUP – Sub group for group.

• NOTIFICATION_TEMPLATE – IG notification template.

• ACCESS_REQUEST_POLICY – Access request policy.

• ACCESS_REQUEST_APPROVAL_POLICY – Access request approval policy.

• LICENSE – License.

• DATA_POLICY – Data policy.

• CERTIFICATION_POLICY – Certification policy.

• ANALYTICS_FACT – Analytics fact.

Technical Reference 32
 • ANALYTICS_DASHBOARD – Analytics dashboard.

• DECISION_SUPPORT_POLICY – Decision support policy.

• TROUBLE_SHOOT_INFO – Trouble shooting information.

• ARCHIVAL – Archival information.

• MAINTENANCE – Maintenance information.

• DATA_QUERY – Data query.

• ACCESS_REQUEST_ITEM – Access request item.

• REVIEW_ITEM – Review item.

• FULFILLMENT_ITEM – Fulfillment item for data query.

• PERMISSION_ASSIGNMENT – Permission assignment.

• AUTHORIZATION – Authorization.

• CERTIFICATION_POLICY_VIOLATION – Certification policy violation.

• REMEDIATION – Remedation

• SOD_VIOLATION – SoD policy violation.

• CAPPLICATION – Collection application.

• FULFILLMENT_TARGET – Fulfillment target.

• FULFILLMENT_SAMPLE – Fulfillment sample.

• USER_SOURCE – User source.

13.6 Group member type (ENUM: GroupMemberType)

Types of group members.

Database table reference: CGROUP_USER.MEMBER_TYPE

• USER – Member is a user.

• GROUP – Member is a group.

• USER_OR_GROUP – Member can be a user or a group.

13.7 Job schedule kind (ENUM: JobSchedule.Kind)

Kinds of job schedules

Database table references: JOB_SCHEDULE.JOB_SCHEDULE_KIND

• COLLECTION – Data collection.

Technical Reference 33
 • REVIEW – Review.

• RISK_SCORING – Risk scoring.

• RTC_EVENT_INGESTION – Real time collection.

• CERT_POLICY_CALCULATION – Certification policy calculation.

• DATA_POLICY_CALCULATION – Data policy calculation.

13.8 Job status (ENUM: JobStatus)

Status of a scheduled job.

Database table references: DATA_SOURCE_COLLECTION.JOB_STATUS,

DATA_SOURCE_TEST_COLLECTION.JOB_STATUS, JOB_END.JOB_STATUS

• INITIALIZING – Job has been created, but is not yet running – still pending.

• STARTED – Job has started.

• COMPLETE – Job is completed.

• ERROR – Some job steps failed, job may still be running.

• CANCELLED – Job was cancelled.

13.9 Owner type (ENUM: OwnerType)

Owner types.

Database table references: CAPPLICATION_OWNER.OWNER_TYPE,

COLLECTED_ACCOUNT_OWNER.OWNER_TYPE, COLLECTED_PERMISSION_OWNER.OWNER_TYPE

• USER – Owner is a user.

• GROUP – Owner is a group.

• ACCOUNT – Owner is an account.

13.10 Service status (ENUM: ArcServiceStatus)

Status of service instances.

Database table references: SERVICE_INSTANCE.STATUS

• INITIALIZED – Service is initialized.

• RUNNING – Service is running.

• STOPPED – Service is stopped.

Technical Reference 34
13.11 Snapshot status (ENUM: SnapshotStatus)
Status of a snapshot.

Database table reference: SNAPSHOT.STATUS

• PENDING – Snapshot has been created, but not unified.

• UNREALIZED – Snapshot has been unified, but not realized.

• REALIZED – Snapshot has been realized.

13.12 Snapshot type (ENUM: SnapshotType)

Status of a snapshot.

Database table reference: SNAPSHOT.TYPE

• IDENTITY_UNIFICATION – Identity unification snapshot.

• APPLICATION_RESOLUTION – Application publication/resolution snapshot.

• PUBLICATION – Publication for catalog snapshot.

• POLICY_DETECTION – No longer used.

13.13 Time units (ENUM: TimeUnitType)

Time unit types.

Database table references: JOB_TRIGGER.INTERVAL_UNIT,

MAINTENANCE_SCHEDULE.REPEAT_INTERVAL_UNIT, REMEDIATION.REVIEW_DURATION_UNIT,
REVIEW_DEFINITION.DURATION_UNIT, REVIEW_DEFINITION.END_REMINDER_UNIT,
REVIEW_DEFINITION.ESCALATION_TIMEOUT_UNIT, REVIEW_DEFINITION.EXPIRATION_EXTENSION_UNIT,
REVIEW_DEFINITION.REPEAT_UNIT, REVIEW_DEFINITION.VALID_FOR_UNIT,
REVIEW_NOTIFY_INSTANCE.NOTIFY_REPEAT_UNIT, REVIEW_NOTIFIFY_INSTANCE.NOTIFY_UNIT,
REVIEW_NOTIFY_SCHEDULE.NOTIFY_UNIT, REVIEW_RECUR_NOTIFY_SCHEDULE.END_NOTIFY_UNIT,
REVIEW_RECUR_NOTIFY_SCHEDULE.MIN_PERIOD_UNIT,
REVIEW_RECUR_NOTIFY_SCHEDULE.START_NOTIFY_UNIT

• MILLIS - Milliseconds

• SECONDS – Seconds

• MINUTES – Minutes

• HOURS – Hours

• DAYS – Days

• WEEKS – Weeks

• MONTHS – Months

Technical Reference 35
 • YEARS – Years

13.14 Verification task state (ENUM: VerifyTaskState)

State of verification task.

Database table references: VERIFICATION_STATUS.STATE

• RUNNING – Verification is in progress.

• FAILED – Fatal error encountered during verification.

• COMPLETED_SUCCESS – Verification completed with no errors.

• COMPLETED_FAILURE – Verification completed with some errors.

• TIMED_OUT – Verification task took too long.

14 Notification Templates
This section documents ENUMs associated with notification templates.

14.1 Notification area type (ENUM: NotificationAreaType)

Functional type of a notification template.

Database table references: IG_NOTIFICATION_TEMPLATE.FUNCTIONAL_TYPE

• REVIEW - Review.

• SOD – SoD policy.

• REQUEST – Access request.

• BUSINESS_ROLE_APPROVAL – Business role approval.

• FULFILLMENT – Fulfillment.

• BULK_DATA – Bulk data curation.

• UNASSIGNED – Unassigned type.

• REMEDIATION – Remediation.

14.2 Notification content type (ENUM: NotificationContentType)

Types of content for a notification template.

Database table references: IG_NOTIFICATION_TEMPLATE.CONTENT_TYPE

• ACTIVE – Template is active.

Technical Reference 36
 • INACTIVE – Template is inactive.

• DELETED – Template is deleted.

14.3 Notification repeat type (ENUM: NotificationRepeatType)

Notification repeat type.

Database table references: REVIEW_RECUR_NOTIFY_SCHEDULE.REPEAT_TYPE

• EVENLY_SPACED – Repeat times are evenly spaced.

• NEVER – Do not repeat.

15 Reviews
This section documents ENUMs associated with review definitions and review instances.

15.1 Account relation type (ENUM: AccountRelationType)

How accounts are related to users.

Database table reference: REVIEW_ITEM.RELATION_TO_USER_TYPE, SACCOUNT.RELATION_TO_USER_TYPE

• UNMAPPED – Account is not associated with a user.

• SINGULAR – Account has one user.

• SHARED – Account has multiple users.

15.2 Review expiration type (ENUM: ReviewExpirationType)

Review expiration policies. Defines what to do when a review expires.

Database table reference: REVIEW_DEFINITION.EXPIRATION_POLICY

• TERMINATE – Terminate review upon expiration.

• EXTEND – Extend review upon expiration.

• COMPLETE – Complete review upon expiration.

• COMPLETE_KEEP – Complete review upon expiration and KEEP undecided items.

• COMPLETE_REMOVE – Complete review upon expiration and REMOVE undecided items.

15.3 Review item final decision (ENUM: ReviewItemDecision)

This is the final decision made on the review item based on reviewer.

Technical Reference 37
Database table reference: REVIEW_ITEM.FINAL_DECISION

• KEEP - Keep item

• REMOVE - remove item,

• ASSIGN_USER - assign user to account,

• MODIFY_ACCESS - modify access

• CANCELED - item was cancelled. Set when review is terminated

• MODIFY_ENTITY - modify entity such as user profile

• MODIFY_SUPERVISOR - modify supervisor

15.4 Review item status (ENUM: ReviewItemStatus)

Status of review item.

Database table reference: REVIEW_ITEM.ITEM_STATUS

• IN_REVIEW - Item is under review

• NOT_REVIEWABLE - Item is placeholder and not under review

• AWAITING_APPROVAL - Reviewers have completed their tasks, awaiting owner approval

• APPROVED - Item approved by review owner or admin

• APPROVAL_PROCESSED - Approval has been process by provisioning service. This can be a terminal state

• APPROVAL_PROCESS_ERROR - There was an error processing the review item by the provisioning service.
This can be a terminal state

15.5 Review item type (ENUM: ReviewItemType)

Type of review item.

Database table reference: REVIEW_ITEM.ITEM_TYPE

• PERMISSION - Permission

• ACCOUNT - Account

• ROLE - Technical role

• BUSINESS_ROLE - Business role

• USER - User profile

• DIRECT_REPORT - Direct report

Technical Reference 38
15.6 Review notification event (ENUM: ReviewNotificationEvent)
Review notification events. Defines review events which will cause notifications to be sent out.

Database table reference: REVIEW_NOTIFY_INSTANCE.REVIEW_NOTIFY_EVENT

• AFTER_REVIEW_START – Send notification at start of review.

• BEFORE_REVIEW_EXPIRE – Send notification before a review’s end date.

• AFTER_REVIEWER_TASK_START – Send notification at start of reviewer task.

• BEFORE_REVIEWER_TASK_EXPIRE – Send notification before reviewer’s task expiration date.

• AFTER_REVIEWER_TASK_EXPIRE – Send notification after reviewer’s task expiration date.

• AT_REVIEWER_TASK_REASSIGN – Send notification when reviewer’s task is reassigned.

• AFTER_OWNER_TASK_START – Send notification when starting owner’s approval task.

• AFTER_AUDITOR_TASK_START – Send notification when starting auditor’s task.

• BEFORE_AUDITOR_TASK_EXPIRE – Send notification when auditor’s task expires.

• AT_REVIEW_END – Send notification at the end of the review.

• AT_REVIEW_CHANGE – Send notification when a review instance changes.

• AT_AUTO_PROVISIONING_START_ERROR – Send notification when an auto provisioning start error occurs.

• AT EXTERNAL_PROVISIONING_START_ERROR – Send notification when an external provisioning error

occurs.

• AT CERTIFICATION_START_ERROR – Send notification when an error occurs at certification start.

• AT CHANGESET_GENERATION_ERROR – Send notification when change set generation error occurs.

15.7 Review partial approval policy type (ENUM: ReviewPartialApprovalType)

Defines the partial approval policy used for the review.

Database table reference: REVIEW_DEFINITION.PARTIAL_APPROVAL_POLICY

• NONE - Partial approval not allowed

• ON_DEMAND - Review owner initiates partial approval on demand

• AUTO - Partial approval is completed automatically when review item completes it's reviewer cycle

15.8 Review start type (ENUM: ReviewStartType)

Review start types. Indicates how a review was started.

Database table reference: REVIEW_INSTANCE.START_TYPE, REVIEW_INSTANCE_MONITOR.START_TYPE

• ON_DEMAND – Review was started on demand by user.

Technical Reference 39
 • SCHEDULE – Review was started by a job schedule as defined in the review definition.

• EXTERNAL – Review was started by an external service/policy – such as micro certification.

15.9 Review status (ENUM: ReviewStatus)

Status of review.

Database table reference: REVIEW_INSTANCE.STATUS

• STARTING - Review is in the process of being started to either a PREVIEW or RUNNING state, formerly
INITIALIZED in 2.5 and below

• PREVIEW - Review is in preview stage, emails have not been sent, visibility is limited to review administrator.

• PREVIEW_STARTING - This is the process of launching a review from PREVIEW to RUNNING.

• RUNNING - WF process has started, emails sent and review is officially running and visible to review owner and
reviewer(s).

• CERTIFYING - Waiting on Review Owner for certification decisions. Review owner can override and resolve
conflicts in this state.

• COMPLETE - This is a temporal state used for completing a review as is, a review instance record in the DB will
never have this status.

• PARTIAL_APPROVE - This is a temporal state used for partial completion of review items (and send to
fulfillment), a review instance record in the DB will never have this status.

• AUDIT_APPROVAL - Waiting audit approval.

• NOT_CERTIFIED - Review was rejected by Auditor.

• CERTIFIED - Review auditor or review owner has certified.

• CANCELED - Canceled/Terminated.

• PREVIEW_CANCELED - Staged review in PREVIEW mode is Terminated.

• TIMED_OUT - Workflow timed out.

• ERROR - Error occurred.

15.10 Review target data type (ENUM: ReviewTargetDataType)

Data types for review definition targets of various kinds.

Database table reference: REVIEW_DEFN_TARGET_DATA.DATA_TYPE

• CRITERIA_SPEC – Targets are specified with criteria. The criteria is specified as JSON.

• LINKED_ENTITIES – Targets are specified as a list of entities, using their unique ID or ID. The list is specified
as JSON.

Technical Reference 40
15.11 Review target type (ENUM: ReviewTargetType)
Review target types..

Database table reference: REVIEW_DEFINITION.REVIEW_TARGET_TYPE

• PERMISSIONS – Permissions are the main target of review.

• ACCOUNTS – Accounts are the main target of review.

• ORPHAN_ACCOUNTS – Orphaned accounts are the main target of review.

• BUSINESS_ROLES – Business roles are the main target of review.

• ROLES – Technical roles are the main target of review.

15.12 Review types (ENUM: ReviewType)

Defines the type of review.

Database table reference: REVIEW_DEFINITION.REVIEW_TYPE

• USER_ACCESS - User Access review

• ORPHAN - Unmapped account review

• BROLE_MEMB - Business Role Membership reviews

• BROLE_DEFN - Business role definition review

• ACCOUNT - Account review

• USER_PROFILE - User profile review

• DIRECT_REPORT - Direct report review

The following review types are used functionally to supercede a subset of settings defined in the originating review
definition. They are referenced by a running review instance (review_instance.staged_review_definition_id). It is
important that the original review definition settings are still used, these are only a subset allowed by feature function.

• STAGED - Settings overriden while review is started in "preview" mode

• MICRO_CERT - Settings overriden by external policy to start a micro certification using normal target spec

• MICRO_CERT_DATA - Settings overriden by external policy to start a micro certification, with custom data linked
to suser, saccount, spermission, etc.

15.13 Reviewer item action (ENUM: ReviewActionType)

The action the reviewer took on the item in their queue.

Database table reference: REVIEW_ITEM_ACTON.ACTION

Technical Reference 41
 • PENDING - No decision has been made yet

• KEEP - Keep item

• REMOVE - Remove item

• ASSIGN_USER - Assign user to account

• CONFIRM_KEEP - Secondary reviewer confirms keep decision from initial reviewer

• CONFIRM_REMOVE - Secondary reviewer confirms keep decision from initial reviewer

• CONFIRM_ASSIGN_USER - - Secondary reviewer confirms assigned user from initial reviewer

• REASSIGNED - reviewer item reassigned

• TIMED_OUT - reviewer item timed out

• ESCALATE - escalated to either next reviewer, escalation owner, or review owner

• MODIFY_ACCESS - Reviewer modified access

• CONFIRM_MODIFY_ACCESS - secondary reviewer(s) confirmed access modification from intial reviewer

• MODIFY_ENTITY - modify entity applicable to user profile and business role definition review

• CONFIRM_MODIFY_ENTITY - secondary reviewer(s) confirmed modify entity from intial reviewer

• MODIFY_SUPERVISOR - change the user's superivisor, applicable to user profile review

• CONFIRM_MODIFY_SUPERVISOR - secondary reviewer(s) confirmed the change supervisor change from the
initial reviewer

• SKIP_KEEP - secondary reviewer skipped because initial reviewer kept item, based on policy defined on review
definition

• SKIP_REMOVE- - secondary reviewer skipped because initial reviewer removed item, based on policy defined
on review definition

15.14 Reviewer item status (ENUM: ReviewTaskStatus)

The status of the reviewer item/task.

Database table reference: REVIEW_ITEM_ACTION.REVIEW_ITEM_STATUS

• PENDING - Not in reviewer's queue yet. Only applicable for serial reviews

• IN_PROGRESS - in reviewer queue waiting for reviewer decision

• OVERRIDDEN - reviewer item overridden by review owner or admin

• ESCALATED - reviewer item was esclated to next reviewer because of time out

• CERTIFIED - reviewer item was submitted by reviewer

• REASSIGNED - reviewer item reassigned to a new reviewer

Technical Reference 42
 • CANCELED - item cancelled, review terminated

15.15 Reviewer type (ENUM: ReviewerType)

The type of the reviewer.

Database table references: REVIEWER_DEFINITION.TYPE, REVIEWER_INSTANCE.TYPE,

REVIEW_ITEM_ACTION.REVIEWER_TYPE

• BUSINESS_ROLE_OWNER - Business role owner

• USER - User(s), these can be explicit, or part of group

• SUPERVISOR - supevisor of user,

• APPLICATION_OWNER - application owner(s), only applicable for accounts and or permission items

• PERMISSION_OWNER - permission owner(s)

• SELF - self review,

• EO - Escalation owner/reviewer

• RO - review owner

• EXCEPTION_REVIEWER - Exception Reviewer, this is an item in RO or EO queue that was reassigned

• AUDITOR - review auditor

• COVERAGE_MAP - coverage map

• ACCOUNT_OWNER - account owner

• BUSINESS_ROLE - business role members

15.16 Schedule review repeat (ENUM: ReviewRepeatAfterType)

Defines when the schedule to repeat a review begins. Only applicable to scheduled reviews.

Database table reference: REVIEW_DEFINITION.REPEAT_AFTER

• START - After review starts

• END - After review ends

15.17 Self review policy type (ENUM: SelfReviewPolicyType)

Defines the self review policy.

Database table reference: REVIEW_DEFINITION.SELF_REVIEW_POLICY

• NOT_ALLOWED – Do not allow self review in any form. Self review violations will be escalated at start, or not
allowed.

Technical Reference 43
 • ALLOWED_ALL – Allow self review in all stages of review.

• LIMITED_MULTI – Self reviewer can see items when they are part of a multiple reviewer queue. Otherwise
violation will be escalated at review start, or not allowed.

16 Risk Calculation
This section documents ENUMs associated with risk calculation processes.

16.1 Risk factor operation (ENUM: RiskFactorOperation)

Risk factor operation.

Database table references: RISK_FACTOR_SCORE_CFG.OPERATION

• AVG - Average.

• MAX - Maximum

16.2 Risk factor type (ENUM: RiskFactorType)

Risk factor types.

Database table references: RISK_FACTOR.RISK_FACTOR_TYPE

• RISK – Risk based factor type.

• COUNT – Count based factor type.

• BASE – Base value risk factor.

• AGE – Age based risk factor.

16.3 Risk score status type (ENUM: RiskScoreStatusType)

Risk score calculation status types.

Database table references: RISK_SCORE_STATUS.RISK_SCORE_STATUS

• REQUESTED – Risk score calculation requested.

• IN_PROGRESS – Risk score calculation in progress.

• ERROR – Risk score calculation had an error.

• COMPLETED – Risk score calculation completed.

• CANCELED – Risk score calculation canceled.

• SKIPPED – Risk score calculation skipped.

Technical Reference 44
16.4 Risk score type (ENUM: RiskScoreType)
Risk score types.

Database table references: RISK_SCORE_CFG.RISK_SCORE_TYPE

• UNINITIALIZED – Not configured.

• MANUAL – Collected or curated.

• CALCULATED – Calculated based on risk score formula.

17 Technical Roles and SoD Policies

This section documents ENUMs associated with technical role policies and SoD policies.

17.1 SoD case action type (ENUM: SodCaseActionType)

Types of actions user may take with respect to SoD cases.

Database table reference: SOD_CASE_ACTION.ACTION

• APPROVAL – Approve the SoD violation.

• RESOLVE – Resolve the SoD violation.

• CLOSED – SoD violation was closed, most likely because it no longer is a violation.

17.2 SoD case close reason (ENUM: SodCaseActionType)

Reason that a SoD case was closed.

Database table reference: SOD_CASE_ACTION.ACTION_COMMENT

• POLICY_DELETED – SoD policy was deleted.

• CONDITIONS_CHANGED – SoD policy conditions changed.

• PERMS_OR_ROLES_REMOVED – Permissions or technical roles in the SoD policy were removed, either from
the user or from the catalog.

• USER_DELETED – User in violation of the SoD policy was deleted.

• ACCOUNT_DELETED – Account in violation of the SoD policy was deleted.

17.3 SoD case state (ENUM: SodCaseState)

Types of actions user may take with respect to SoD cases.

Technical Reference 45
Database table reference: SOD_CASE.PRE_HOLD_STATE, SOD_CASE.STATE, SOD_CASE_INFO.STATE

• NOT_REVIEWED – SoD case not yet reviewed.

• APPROVED – SoD case violation was approved.

• APPROVAL_EXPIRED – SoD case violation approval expired.

• RESOLVING – SoD case violation is in the process of being resolved.

• ON_HOLD – SoD case is on hold because the SoD policy has been deactivated.

• CLOSED – SoD case closed – violation no longer exists.

17.4 SoD condition item type (ENUM: ConditionItemType)

Type of item in an SoD policy condition.

Database table reference: SOD_CONDITION_ITEM.TYPE, SOD_REMOVAL_ITEM.TYPE

• ROLE – Item is a technical role.

• PERMISSION – Item is a permission.

• CLOSED – SoD violation was closed, most likely because it no longer is a violation.

17.5 SoD condition type (ENUM: SodConditionType)

Types of SoD policy conditions.

Database table reference: SOD_CONDITION.TYPE

• HAS_ALL – Condition is violated if user or account has all of the permissions or technical roles specified in the
SoD condition.

• HAS_ANY – Condition is violated if user or account has any of the permissions or technical roles specified in the
SoD condition.

• HAS_MULTIPLE – Condition is violated if user or account has two or more of the permissions or technical roles
specified in the SoD condition.

17.6 Technical role and SoD detection status (ENUM: DetectionStatus)

Detection status for technical roles and SoD policies.

Database table references: ROLE_POLICY.DETECTION_STATUS, SOD_POLICY.DETECTION_STATUS

• RUNNING – The role or SoD detection is in progress.

• COMPLETED – The detection completed successfully.

• INACTIVE – The role or sod is not active and, no detections are performed.

Technical Reference 46
 • INVALID – The role or sod is invalid and detection cannot be performed.

• FAILED – The last role or SoD detection failed

17.7 Technical role approval state (ENUM: PolicyState)

State of a technical role.

Database table reference: ROLE_POLICY.STATE

• ACTIVE – Valid, meaning all included permissions are available in the catalog, and the role is included in the
detection process.

• INACTIVE – Valid; however, the role is excluded from the detection process.

• INVALID – Invalid and excluded from detection process due to a detected error. Detection errors are usually the
result of a deleted permission that is included in the technical role.

• MINED -- Technical role was created by role mining and must be promoted before it can be activated.

17.8 Technical role assignment type (ENUM: TechRoleAssignmentType)

Technical role assignment type.

Database table reference: ROLE_USER_ASSIGNED.ASSIGNED_BY, ROLE_USER_ASSIGNED.UNASSIGNED_BY

• BUSINESS_ROLE_AUTO_GRANT – Technical role assign came from business role auto grant.

• BUSINESS_ROLE_AUTO_REVOKE – Technical role unassign came from business role auto revoke.

• ACCESS_REQUEST – Technical role assign/unassign came from an access request.

• REVIEW_REVOKE – Technical role unassign came from a review.

17.9 Technical role risk mode (ENUM: RiskMode)

Methods to set the risk for a technical role.

Database table reference: ROLE_POLICY.RISK_MODE

• MAN – Set the risk mode manually

• AVE - The risk is calculated from the average of the risk all permissions included in the technical role

• MAX – The risk is set to the maximum risk of the permissions included in the technical role.

Technical Reference 47
Index of ENUMs

AccountRelationType .................................................. 37 DataProductionErrType ............................................... 23

AnalyticsType .............................................................. 30 DataSourceType.......................................................... 30
ApplicationType............................................................. 9 DetectionStatus ........................................................... 46
ApprovalAction .............................................................. 7 DynamicParamDataType .............................................. 9
ApprovalPolicyType .................................................... 14 EntityType.................................................................... 31
ApprovalState.............................................................. 15 ErrorSeverity................................................................ 26
ArchivalPhase ............................................................. 27 ExecutionType ............................................................. 25
ArchivalTask................................................................ 27 FeedGenerationType ................................................... 26
ArcServiceStatus......................................................... 34 FulfillerProcess ............................................................ 19
AssignmentType ......................................................... 30 FulfillmentType ............................................................ 20
AttributeDataType ....................................................... 11 GroupMemberType ..................................................... 33
AttributeState .............................................................. 11 ItemRequesterType ....................................................... 7
AttributeType ............................................................... 11 JobSchedule.Kind........................................................ 33
AuthPermType ............................................................ 12 JobStatus .................................................................... 34
AuthRole.Roles ........................................................... 12 LicenseType ................................................................ 10
AuthRoleType ............................................................. 12 MaintenanceStatus ...................................................... 28
AuthScopeType........................................................... 14 MaintenanceWaitState ................................................ 28
BusinessRoleDetectionStatus ..................................... 15 MaintScheduleType ..................................................... 28
BusinessRoleItemType ............................................... 15 NotificationAreaType ................................................... 36
CertificationPolicyStatus ............................................. 16 NotificationContentType .............................................. 36
CertPolicyViolationStatus ............................................ 16 NotificationRepeatType ............................................... 37
CertPolicyViolationType .............................................. 16 OwnerType .................................................................. 34
ChangeRequestItemState ........................................... 18 PolicyState............................................................. 45, 47
ChangeRequestType .................................................. 19 ProvisioningStatus ....................................................... 20
ChangetItemActionType .............................................. 18 ProvisioningType ......................................................... 20
CollectionPublishState ................................................ 22 PsodvTaskDeleteReason .............................................. 8
CollectionRunState ..................................................... 24 PurgeableType ............................................................ 28
CollectionStatus .......................................................... 25 RemediationType ........................................................ 17
CollectorStatus ............................................................ 21 RequestItemStatus ........................................................ 8
CollectorType .............................................................. 21 ResolutionAnomalyType .............................................. 26
ConditionItemType ...................................................... 46 ResourceRequestStatus ................................................ 7
CostType ..................................................................... 10 ReviewActionType ....................................................... 41
CoverageMapType ...................................................... 30 ReviewerType.............................................................. 43
Currency ..................................................................... 10 ReviewExpirationType ................................................. 37
DataChangeType ........................................................ 25 ReviewItemDecision .................................................... 37
DataPolicyCriteriaType ............................................... 17 ReviewItemStatus........................................................ 38
DataPolicyType ........................................................... 17 ReviewItemType .......................................................... 38
DataProducerType ...................................................... 22 ReviewNotificationEvent .............................................. 39

Technical Reference 48
ReviewPartialApprovalType ........................................ 39 SnapshotType ............................................................. 35
ReviewRepeatAfterType ............................................. 43 SodCaseActionType .................................................... 45
ReviewStartType ......................................................... 39 SodCaseState ............................................................. 45
ReviewStatus .............................................................. 40 SodConditionType ....................................................... 46
ReviewTargetDataType .............................................. 40 TechRoleAssignmentType .......................................... 47
ReviewTargetType ...................................................... 41 TemplateEventType .................................................... 21
ReviewTaskStatus ...................................................... 42 TemplateState ............................................................. 22
ReviewType .......................................................... 37, 41 TemplateType.............................................................. 22
RiskFactorOperation ................................................... 44 TimeUnitType .............................................................. 35
RiskFactorType ........................................................... 44 UnificationAnomaly ...................................................... 26
RiskMode .................................................................... 47 UnificationBehavior...................................................... 27
RiskScoreStatusType .................................................. 44 UserType ....................................................................... 9
SelfReviewPolicyType ................................................. 43 VerifyTaskState ........................................................... 36
SnapshotStatus ........................................................... 35

Technical Reference 49
Legal Notice
The only warranties for products and services of Micro Focus and its affiliates and licensors (“Micro Focus”) are set forth
in the express warranty statements accompanying such products and services. Nothing herein should be construed as
constituting an additional warranty. Micro Focus shall not be liable for technical or editorial errors or omissions contained
herein. The information contained herein is subject to change without notice.

For additional information, such as certification-related notices and trademarks, see

http://www.microfocus.com/about/legal/.

© Copyright 2020 Micro Focus or one of its affiliates.

Technical Reference 50