{"id":3211,"date":"2024-06-03T09:24:45","date_gmt":"2024-06-03T07:24:45","guid":{"rendered":"https:\/\/pask.id\/permissions-reconciliation-in-pask-version-1-11-0\/"},"modified":"2025-10-20T17:14:56","modified_gmt":"2025-10-20T15:14:56","slug":"permissions-reconciliation-in-pask-version-1-11-0","status":"publish","type":"post","link":"https:\/\/pask.id\/en\/permissions-reconciliation-in-pask-version-1-11-0\/","title":{"rendered":"Permissions reconciliation in PASK version 1.11.0"},"content":{"rendered":"\n<p>\u00a0<\/p>\n\n<p><strong>What&#8217;s new in PASK 1.11.0?<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li> Reconciliation of permissions<\/li>\n<\/ul>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p><strong>Additional functionalities and improvements<\/strong><\/p>\n\n<ul class=\"wp-block-list\">\n<li>Expansion of the Access Report with the ability to filter resources.<\/li>\n\n\n\n<li>Ability to disable all notifications without losing your configuration.<\/li>\n\n\n\n<li>Expanded the forms definition preview with information about business role categories and order justification in the order, forms and task views.<\/li>\n\n\n\n<li>Expanding the list of identity groups, the ability to view its composition.<\/li>\n\n\n\n<li>An alternative view of the identity list, presenting them as tiles in alphabetical order.<\/li>\n<\/ul>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p><strong>Reconciliation of permissions<\/strong><\/p>\n\n<p>Permission reconciliation allows for a comparison of permission status between PASK and the external systems where they are assigned. This process allows for greater control over permissions and ensures their compliance.  <\/p>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p>Reconciliation in PASK can be performed in two ways described below. <\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Manually <\/strong>\u2013 using an Excel file in the appropriate format.<br\/>The user can import the file into the PASK system and initiate the reconciliation process. During this process, the system will compare the permissions data in PASK with that contained in the imported file. <\/li>\n\n\n\n<li><strong>Automatically <\/strong>\u2013 using a connector.<br\/>The system allows you to set up a cyclical, automatic &#8220;Data Reconciliation&#8221; process that compares the authorization status between PASK and external systems according to a pre-defined schedule.<br\/>PASK can configure any number of individual reconciliations. During configuration, you must specify the name, scope, and link to a properly configured connector that retrieves data from the external system. <\/li>\n<\/ul>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1200\" height=\"593\" src=\"https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-1200x593.png\" alt=\"\" class=\"wp-image-3171\" srcset=\"https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-1200x593.png 1200w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-500x247.png 500w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-300x148.png 300w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-768x379.png 768w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-150x75.png 150w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-668x330.png 668w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-1-1-480x237.png 480w\" sizes=\"(max-width:767px) 480px, (max-width:1200px) 100vw, 1200px\" \/><\/figure>\n<p style=\"font-size:16px\"><em>Reconciliation tab in the main menu<\/em><\/p>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p><\/p>\n\n<p><strong>Report of reconciliation<\/strong><\/p>\n\n<p>Main indicator: defining the ratio of correct pairs to the sum of correct and main errors.<\/p>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p>After reconciliation, a report is generated, defining indicators that assess the overall degree of compatibility between permission pairs. Two indicators are distinguished:  <\/p>\n\n<ul class=\"wp-block-list\">\n<li>Main indicator: defining the ratio of correct pairs to the sum of correct and main errors.<\/li>\n\n\n\n<li>Extended index: determining the ratio of correct pairs to the sum of all reconciliation results (correct pairs and errors).<\/li>\n<\/ul>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p>The report presents a detailed comparison of permission status, including information about identities, resources, and their attributes. A key element of the report is the reconciliation result for each permission pair compared. The results are color-coded as follows:   <\/p>\n\n<ul class=\"wp-block-list\">\n<li>green color indicates full compatibility of permission pairs,<\/li>\n\n\n\n<li>orange color indicates inconsistencies, such as: authorization or identity does not exist in PASK or incorrect data in the external source,<\/li>\n\n\n\n<li>red color indicates major errors, such as: no authorization in the external source or in PASK, incorrect data in PASK, duplicate authorization or lack of uniqueness of the identity attribute.<\/li>\n<\/ul>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p>The report allows you to filter the list of permission pairs that fully match the external source and the incorrect pairs. <\/p>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p>In PASK it is possible to view historical reconciliation reports. <\/p>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1200\" height=\"589\" src=\"https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-1200x589.png\" alt=\"\" class=\"wp-image-3172\" srcset=\"https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-1200x589.png 1200w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-500x245.png 500w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-300x147.png 300w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-768x377.png 768w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-150x75.png 150w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-672x330.png 672w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/Obraz1-2-480x236.png 480w\" sizes=\"(max-width:767px) 480px, (max-width:1200px) 100vw, 1200px\" \/><\/figure>\n<p style=\"font-size:16px\"><em>Report of reconciliation<\/em><\/p>\n\n<p style=\"font-size:16px\"><\/p>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<p style=\"font-size:16px\"><\/p>\n\n<p style=\"font-size:16px\"><\/p>\n\n<p><strong>Notification of completed reconciliation <\/strong><\/p>\n\n<p><\/p>\n\n<p>A new notification type, &#8220;Identity Reconciliation Complete,&#8221; has been added, which is sent to selected identities or groups. The notification informs you that reconciliation has completed and allows you to access the report. It also provides basic information about the reconciliation process, including:   <\/p>\n\n<ul class=\"wp-block-list\">\n<li>Status: confirming completion of reconciliation,<\/li>\n\n\n\n<li>Resources: specifying which systems were affected by reconciliation,<\/li>\n\n\n\n<li>Type: indicating whether reconciliation was automatic or manual,<\/li>\n\n\n\n<li>The connector by means of which the process was carried out,<\/li>\n\n\n\n<li>Reconciliation indicators, assessing the overall degree of compatibility of pairs of permissions.<\/li>\n<\/ul>\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"606\" height=\"615\" src=\"https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4.png\" alt=\"\" class=\"wp-image-3173\" srcset=\"https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4.png 606w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4-493x500.png 493w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4-296x300.png 296w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4-75x75.png 75w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4-74x75.png 74w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4-325x330.png 325w, https:\/\/pask.id\/wp-content\/uploads\/2024\/06\/image-4-480x487.png 480w\" sizes=\"(max-width:767px) 480px, 606px\" \/><\/figure>\n<p style=\"font-size:16px\"><em>&#8220;Identity Reconciliation Complete&#8221; Notification<\/em> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0 What&#8217;s new in PASK 1.11.0? Additional functionalities and improvements Reconciliation of permissions Permission reconciliation allows for a comparison of permission status between PASK and the<span class=\"excerpt-hellip\"> [\u2026]<\/span><\/p>\n","protected":false},"author":5,"featured_media":3217,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[105,106],"tags":[],"class_list":["post-3211","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iam","category-idm"],"_links":{"self":[{"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/posts\/3211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/comments?post=3211"}],"version-history":[{"count":1,"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/posts\/3211\/revisions"}],"predecessor-version":[{"id":3213,"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/posts\/3211\/revisions\/3213"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/media\/3217"}],"wp:attachment":[{"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/media?parent=3211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/categories?post=3211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pask.id\/en\/wp-json\/wp\/v2\/tags?post=3211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}