Skip to content

Commit 09b1c63

Browse files
stuart-jaeckel-netwrixstuart-jaeckel-netwrix
authored
Merge pull request #94 from netwrix/stuart/aic-run-scripts
Table, Notes, and Bold Subheading Updated for AIC 12.0
2 parents 4bb5dc0 + ff8d86d commit 09b1c63

File tree

76 files changed

+658
-244
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

76 files changed

+658
-244
lines changed

‎docs/accessinformationcenter/12.0/accessrequests/interface/changes.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,10 @@ The table displays the following information for selected trustee:
2222
- Update Type – Indicates if group membership was added or removed to process the change
2323
- Member Name – sAMAccountName associated with the domain user whose membership was being changed
2424

25-
**NOTE:** The table data grid functions the same way as other Access Information Center table grids.
25+
:::note
26+
The table data grid functions the same way as other Access Information Center table grids.
2627
See the [Data Grid Features](/docs/accessinformationcenter/12.0/admin/navigate/datagrid.md) topic for additional information.
28+
:::
29+
2730

2831
Click **OK** to close the window.

‎docs/accessinformationcenter/12.0/accessrequests/overview.md

Lines changed: 14 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,14 +18,20 @@ folders, SharePoint sites, Active Directory (AD) groups, AD distribution lists,
1818
Administrators groups.All data available within the Access Information Center is collected by
1919
Netwrix Access Analyzer (formerly Enterprise Auditor) according to the targeted environments.
2020

21-
_Remember,_ owners are assigned to resources in the Resource Owners interface. Only resources with
21+
:::tip
22+
Remember, owners are assigned to resources in the Resource Owners interface. Only resources with
2223
assigned owners can be included in the Self-Service Access Requests workflow. These resources must
2324
also have the Allow access requests option selected.
25+
:::
2426

25-
**_RECOMMENDED:_** When deploying the Access Information Center in an organization to enable
27+
28+
:::info
29+
When deploying the Access Information Center in an organization to enable
2630
Self-Service Access Requests, notifications should be sent to assigned owners as well as domain
2731
users. See the [Owner Confirmation Request Email](/docs/accessinformationcenter/12.0/owneroverview/confirmationrequest.md)
2832
topic for additional information.
33+
:::
34+
2935

3036
The Your Access portal provides domain users with the ability to view current access to managed
3137
resources, request access to resources, and view the request status for pending and processed
@@ -38,12 +44,12 @@ without an Access Information Center role and who are not assigned resource owne
3844
to the Your Access portal at login. See the
3945
[Your Access Portal Overview](/docs/accessinformationcenter/12.0/youraccessportal/overview.md) topic for additional information.
4046

41-
Who Can Manage Self-Service Access Requests (Request Administrators)?
47+
**Who Can Manage Self-Service Access Requests (Request Administrators)?**
4248

4349
- Access Information Center Administrators
4450
- Access Information Center Security Team Members
4551

46-
Who Participates in Self-Service Access Requests?
52+
**Who Participates in Self-Service Access Requests?**
4753

4854
- Domain Users — Submit requests for access to resources or membership in groups
4955
- Owners — Approve or deny access requests
@@ -59,10 +65,13 @@ Prerequisites:
5965
- Access Information Center configured to send Notifications. See the
6066
[Notifications Page](/docs/accessinformationcenter/12.0/admin/configuration/notifications.md) topic for additional information.
6167

62-
**NOTE:** By default, the Access Information Center is configured to send notifications only to
68+
:::note
69+
By default, the Access Information Center is configured to send notifications only to
6370
the primary owner. However, this can be customized to send notifications to all assigned owners.
6471
See the [Notifications Page](/docs/accessinformationcenter/12.0/admin/configuration/notifications.md) topic for additional
6572
information.
73+
:::
74+
6675

6776
- Access Information Center configured to commit AD changes
6877
- Resources and groups must be known to the Access Information Center, having been audited by Access

‎docs/accessinformationcenter/12.0/admin/additionalconfig/aliasserver.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ The Response Server Host Name parameter can be modified in the
1717
`AccessInformationCenter.Service.exe.config` file, which is located in the Access Information Center
1818
installation directory:
1919

20-
…\STEALTHbits\Access Information Center
20+
**…\STEALTHbits\Access Information Center**
2121

2222
Follow the steps to supply an alias server host name for notification hyperlinks.
2323

‎docs/accessinformationcenter/12.0/admin/additionalconfig/commitchanges.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,11 +23,14 @@ configure access groups for those resources in the target environment. An access
2323
of the following access levels to a specific resource: Read, Modify, or Full Control. See the
2424
[Access Groups](/docs/accessinformationcenter/12.0/resourceowners/accessgroups.md) topic for additional information.
2525

26-
**NOTE:** The Access Information Center can only commit group membership changes to domains it has
26+
:::note
27+
The Access Information Center can only commit group membership changes to domains it has
2728
access to, that is the domain where it resides or domains with a trust that are known to it. Also,
2829
the Active Directory service account must have the required permissions for all applicable domains.
2930
See the [Multiple Domains](/docs/accessinformationcenter/12.0/admin/configuration/activedirectory.md#multiple-domains) topic for
3031
additional information.
32+
:::
33+
3134

3235
## Best Practice for Least Privilege
3336

@@ -47,8 +50,11 @@ two options for assigning the Active Directory service account:
4750
option, but can be used as the Active Directory service account. See the
4851
[Active Directory Page](/docs/accessinformationcenter/12.0/admin/configuration/activedirectory.md) topic for additional information.
4952

50-
**_RECOMMENDED:_** The best practice is to create at least two OUs for ease of organization: a
53+
:::info
54+
The best practice is to create at least two OUs for ease of organization: a
5155
security group OU and a distribution list group OU.
56+
:::
57+
5258

5359
**Step 3 –** Apply delegation to these OUs to grant the minimal rights of **Allow Read Members** and
5460
**Allow Write Members** to the Active Directory service account.

‎docs/accessinformationcenter/12.0/admin/additionalconfig/emailtemplates.md

Lines changed: 32 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -32,56 +32,66 @@ Substitution Tokens are only valid for certain Notification message templates. B
3232
the Substitution Tokens, the value or string they represent, and the message templates in which they
3333
may be used.
3434

35-
| Substitution Token | Description | Applicable Template(s) |
36-
| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
37-
| @AccessName@ | Descriptive name of the type of access being requested (Read, Modify, etc.) to a resource | AccessRequestConfirm AccessRequestExpired AccessRequestStatus |
38-
| @Changes@ | Number of review changes | EntitlementReviewUpdates |
39-
| @LoginUrl@ | URL that allows a user to access the default (login) page | AccessRequestConfirm AccessRequestReminder OwnershipChangeNotification ReminderDigest |
40-
| @RequestCount@ | Numerically formatted count of pending access requests | ReminderDigest |
41-
| @ResourceDescription@ | Description of resource - To use the resource's description in emails instead of the path, replace @ResourcePath@ with @ResourceDescription@ | AccessRequestConfirm AccessRequestStatus OwnershipConfirm ReminderDigest |
42-
| @ResourcePath@ | Path of the current resource - To use the resources’ description in emails instead of the path, replace @ResourcePath@ with @ResourceDescription@ | AccessRequestConfirm AccessRequestExpired AccessRequestStatus EntitlementReviewUpdates OwnershipConfirm ReminderDigest |
43-
| @ResourceType@ | Type of resource | AccessRequestConfirm AccessRequestExpired AccessRequestStatus EntitlementReviewUpdates OwnershipConfirm ReminderDigest |
44-
| @ResourceUrl@ | URL specifically created to respond to a request | AccessRequestConfirm EntitlementReviewReminder OwnershipConfirm |
45-
| @ResponseCount@ | Numerically formatted count of pending reviews or access requests | AccessRequestReminder ReminderDigest |
46-
| @ReviewCount@ | Numerically formatted count of pending reviews | ReminderDigest |
47-
| @ReviewName@ | Name of the resource review | EntitlementReviewUpdates |
48-
| @ReviewType@ | Type of resource review | EntitlementReviewUpdates |
49-
| @StatusText@ | Status of an access request (Confirmed, Declined, Waiting) | AccessRequestStatus |
50-
| @UserName@ | Name of the user who submitted the access request | AccessRequestConfirm AccessRequestStatus EntitlementReviewUpdates |
51-
| @UserNotes@ | Any notes the user submitted as part of the access request | AccessRequestConfirm AccessRequestStatus |
35+
| Substitution Token | Description | Applicable Template(s) |
36+
| --------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
37+
| @AccessName@ | Descriptive name of the type of access being requested (Read, Modify, etc.) to a resource | AccessRequestConfirm AccessRequestExpired AccessRequestStatus |
38+
| @Changes@ | Number of review changes | EntitlementReviewUpdates |
39+
| @LoginUrl@ | URL that allows a user to access the default (login) page | AccessRequestConfirm AccessRequestReminder OwnershipChangeNotification ReminderDigest |
40+
| @RequestCount@ | Numerically formatted count of pending access requests | ReminderDigest |
41+
| @ResourceDescription@ | Description of resource <ul><li>To use the resource's description in emails instead of the path, replace @ResourcePath@ with @ResourceDescription@</li></ul> | AccessRequestConfirm AccessRequestStatus OwnershipConfirm ReminderDigest |
42+
| @ResourcePath@ | Path of the current resource <ul><li>To use the resources’ description in emails instead of the path, replace @ResourcePath@ with @ResourceDescription@</li></ul> | AccessRequestConfirm AccessRequestExpired AccessRequestStatus EntitlementReviewUpdates OwnershipConfirm ReminderDigest |
43+
| @ResourceType@ | Type of resource | AccessRequestConfirm AccessRequestExpired AccessRequestStatus EntitlementReviewUpdates OwnershipConfirm ReminderDigest |
44+
| @ResourceUrl@ | URL specifically created to respond to a request | AccessRequestConfirm EntitlementReviewReminder OwnershipConfirm |
45+
| @ResponseCount@ | Numerically formatted count of pending reviews or access requests | AccessRequestReminder ReminderDigest |
46+
| @ReviewCount@ | Numerically formatted count of pending reviews | ReminderDigest |
47+
| @ReviewName@ | Name of the resource review | EntitlementReviewUpdates |
48+
| @ReviewType@ | Type of resource review | EntitlementReviewUpdates |
49+
| @StatusText@ | Status of an access request (Confirmed, Declined, Waiting) | AccessRequestStatus |
50+
| @UserName@ | Name of the user who submitted the access request | AccessRequestConfirm AccessRequestStatus EntitlementReviewUpdates |
51+
| @UserNotes@ | Any notes the user submitted as part of the access request | AccessRequestConfirm AccessRequestStatus |
52+
5253

5354
## Customize Email Templates
5455

5556
Email templates are shipped in a ZIP file and stored in the Access Information Center installation
5657
directory:
5758

58-
…\STEALTHbits\Access Information Center
59+
**…\STEALTHbits\Access Information Center**
5960

6061
Follow the steps to customize the email templates.
6162

62-
**NOTE:** To successfully modify these Notifications email templates, a familiarity with basic HTML
63+
:::note
64+
To successfully modify these Notifications email templates, a familiarity with basic HTML
6365
is necessary.
66+
:::
67+
6468

6569
![Templates Zip file in the Installation Directory](/img/product_docs/accessinformationcenter/12.0/admin/additionalconfig/emailtemplateszipfile.webp)
6670

6771
**Step 1 –** Navigate to the Access Information Center installation directory:
6872

69-
…\STEALTHbits\Access Information Center
73+
**…\STEALTHbits\Access Information Center**
7074

7175
**Step 2 –** Unzip the `Templates.zip` file and save the contents to a folder within this directory
7276
named `Templates`.
7377

74-
**CAUTION:** The customized email templates must be in the `Templates` folder within the
78+
:::warning
79+
The customized email templates must be in the `Templates` folder within the
7580
installation directory to be preserved during future application upgrades.
81+
:::
82+
7683

7784
![Unzipped Email Templates in Templates Folder](/img/product_docs/accessinformationcenter/12.0/admin/additionalconfig/emailtemplatesunzipped.webp)
7885

7986
**Step 3 –** Locate the desired HTML message template.
8087

8188
**Step 4 –** Open the file with a text editor, e.g. Notepad, and customize the email body.
8289

83-
**NOTE:** Using a tool other than a text editor to edit HTML files, such as a WYSIWYG web page
90+
:::note
91+
Using a tool other than a text editor to edit HTML files, such as a WYSIWYG web page
8492
editor which may drastically alter the underlying HTML code, is not supported.
93+
:::
94+
8595

8696
**Step 5 –** Email subject lines can be edited by changing the text between the opening `<title>`
8797
tag and the closing `</title>` tag.

‎docs/accessinformationcenter/12.0/admin/additionalconfig/entraidsso.md

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,11 @@ The Access Information Center can be configured to use Microsoft Entra ID Single
1010
configured, users are directed to the Microsoft Entra ID login page, and can log in using their
1111
existing Entra credentials.
1212

13-
**NOTE:** If enabled, only Microsoft Entra ID SSO can be used for logging in. Other accounts,
13+
:::note
14+
If enabled, only Microsoft Entra ID SSO can be used for logging in. Other accounts,
1415
including the default administrator account, cannot be used.
16+
:::
17+
1518

1619
The following is required to use Microsoft Entra ID SSO:
1720

@@ -81,15 +84,18 @@ Microsoft Entra ID SSO in the Access Information Center config file.
8184
To enable Microsoft Entra ID SSO for the Access Information Center, the config file needs to be
8285
updated with values from Microsoft Entra ID. Follow the steps to enable the SSO.
8386
84-
_Remember,_ Enabling Entra ID SSO requires SSL to be enabled. If this was not done during the
87+
:::tip
88+
Remember, Enabling Entra ID SSO requires SSL to be enabled. If this was not done during the
8589
installation, then you must manually configure it. See the
8690
[Securing the Access Information Center](/docs/accessinformationcenter/12.0/installation/secure.md) topic for additional
8791
information.
92+
:::
93+
8894
8995
**Step 1 –** Open the `AccessInformationCenter.Service.exe.config` file in a text editor, such as
9096
Notepad. The file is located in the Access Information Center installation directory:
9197
92-
…\Program Files\STEALTHbits\Access Information Center
98+
**…\Program Files\STEALTHbits\Access Information Center**
9399
94100
![Parameters in the config file](/img/product_docs/accessinformationcenter/12.0/admin/additionalconfig/configfileentrasso.webp)
95101
@@ -103,9 +109,12 @@ as follows:
103109
    <add key="WsFederationReply" value="" />
104110
```
105111
106-
**NOTE:** For new installations of the Access Information Center these parameters are already in the
112+
:::note
113+
For new installations of the Access Information Center these parameters are already in the
107114
config file. If you have upgraded from a previous version, then you need to manually add them as the
108115
config file is retained during an upgrade to maintain the existing settings.
116+
:::
117+
109118
110119
**Step 3 –** Add the required values for the parameters from your Microsoft Entra ID application:
111120

0 commit comments

Comments
 (0)