Object governance

Object governance includes specification of owners, approvers, access control over object modification, object definition certification and other controls applicable to creation, maintenance and evolution of object definitions. The mechanisms are applied to role model and role-based access control mechanisms in particular (role governance). However, the same mechanisms equivalently apply to other midPoint objects, such as organizational units, applications and services. Policy rules can be applied to make sure roles and applications have appropriate owners, approvers and other governance-related relations established. Role certification can be applied a controlled review of role definitions, a process where appropriate reviewers have to certify that access granted by a role is correct.

This feature is related to the following compliance frameworks: