Configure Governance Analyzer settings

Early Access release. See Enable self-service features.

Configure insights that Governance Analyzer should display to the reviewer. These can help the reviewer understand the context of the approve or revoke recommendation, and make a more informed decision on the review item.

Before you begin

  • You're an access certification or super admin.

  • Ensure that Governance Analyzer is enabled for your org.

  • Read Governance analyzer.

  • Read Customizable reviewer context

  • If you want to provide Governance Analyzer recommendations to the reviewer or include the By Recommendation mode in smart review, the Enable Governance Analyzer recommendations toggle must be on. See Enable AI

Allow Governance Analyzer to generate recommendations

The Enable Governance Analyzer recommendations toggle is on by default when you enable Governance Analyzer for your org. You must do these steps only if you turned off this setting in the past and need to allow Governance Analyzer to generate recommendations again.

  1. In the Admin Console, go to Identity GovernanceSettingsGovernance AI.

  2. In the Governance Analyzer section, toggle the Enable Governance Analyzer recommendations as needed.

    Turning on this setting doesn't make recommendations visible to reviewers. To provide Governance Analyzer recommendations to reviewers, you must turn on the Recommendations option as well before the campaign launches. See Show insights and recommendations to reviewers.

Show insights and recommendations to reviewers

  1. In the Admin Console, go to Identity Governance Access Certifications Certification campaigns.

  2. On the Access Certifications page, open the Settings tab.

  3. Click Edit in the Contextual Information panel.

  4. Expand the Additional information panel.

  5. From the Governance history section, select the Governance analyzer attributes you want to include in the campaign. The selected attributes are visible to campaign reviewers for each review item.

    • Governance Analyzer insights: When this option is selected, Okta generates all insights for the campaign at the time of the campaign launch and shows the Governance Analyzer insights section in the Review details panel if there's at least one individual insight available. This is the main control to show or hide the Governance Analyzer insights section in the Review details panel.

    • Recommendation: When this option is selected, Okta shows Governance Analyzer recommendations for approving or revoking access during access certification campaigns.

  6. Click Save changes.

These changes only apply to new campaigns created and launched in the org going forward. If you have multiple campaigns that require different contextual information, configure the first one and launch it immediately. Then, configure the settings for the next campaign and launch it. Repeat as often as you need to change the context.

Customize insights for reviewers

Choose individual insights to share with your reviewers.

  1. In the Admin Console, go to Identity Governance Access Certifications Certification campaigns.

  2. On the Access Certifications page, open the Settings tab.

  3. In the Governance analyzer section, click Edit.

  4. Select the insights that you want to display to the reviewer.

    • Usage history

    • Past governance decisions

    • App assignment

    • User profile changes

      Insights are visible to reviewers only if the Governance Analyzer insights option located on the Contextual Information page was turned on before the campaign launched. If that option was on, then your changes on this page affect the visibility of individual insights in all active campaigns that Okta generated insights for. Also, the Separation of duties insight is always visible to reviewers.

  5. Click Save changes to apply them to insight determinations in all campaigns that launch after this. The changes are automatically applied to the insight determinations that are displayed to reviewers for all active campaigns when the campaign data is periodically refreshed.

  6. Optional. To apply these changes immediately to active campaigns, go to the campaign details page and click Refresh review item attributes from the Actions menu.

After a campaign launches, it may take a few minutes for Governance Analyzer insights and recommendations to appear.

Related topics

Understand reviewer experience