Completing the CyberArk user certification

Introduction

According to Franklin County security policies, users with privileged account access need to be reviewed on a quarterly basis. To achieve an accurate licensing count and record of approved users for password vault web access (PVWA) to CyberArk, we have a system called Entra ID that allows designated approvers to review, approve/deny, and provide business justifications through user certifications.

Designated approvers have 15 business days to complete user certifications.

Instructions

  1. You will receive an email from Microsoft Security asking you to complete access review(s):

    • Here's an example of the email you will receive.

      image-20240723-115232.png

      image-20240723-123341.png

  1. Click Start review > to open the access review.

  2. Login with your Franklin County or work email address and password.

image-20240522-135850.png
image-20240522-135924.png
  1. Follow the corresponding directions as appropriate for your account’s authentication setup:

MFA

SMS

VOICE

MFA

SMS

VOICE

image-20240603-174333.png
image-20240603-173607.png
image-20240603-173637.png

Respond “yes” to the Ping MFA prompt on your device.

Check your text messages for a passcode and enter that passcode into the Authentication prompt.

Check your voicemail for a passcode and enter that passcode into the Authentication prompt.

  1. Once logged in you will see My Access on the left tab then to the right under Groups and Apps, you can see:

    • Name: The name of the access review.

    • Due: The due date for the review.

      image-20240522-160430.png
  1. Select the name of the access review to get started.

  2. After it opens, review the list and decide whether to approve or deny the user continued access.

    1. Select one or more users by selecting the circle next to their names.

    2. Select Approve or Deny.

    3. Enter Reason (business justification).

    4. Select Submit.

      image-20240723-120007.png

      image-20240723-120411.png

  1. When all decisions are finalized, sign out by clicking your name/initial/picture icon in the upper right corner.

image-20240523-170301.png