Assuming that the policy violation owner has the necessary permissions, is this a valid option for the policy violation owner to use when acting on a…

The action "Schedule Policy Composition Certification" is not a valid remediation option for a policy violation owner. This type of certification is an administrative task used to review and validate the definition and rules of the policy itself, not to act upon a specific instance of a violation for a user. The standard remediation options available to a policy violation owner are focused on the violation itself, such as remediating the access (e.g., revoking a role), allowing a temporary exception, or forwarding the violation to another user for a decision.

A. Yes: This is incorrect because the action addresses the policy's definition, not the specific user's violation. The violation owner's responsibility is to manage the violation instance, not the policy's composition.

1. SailPoint IdentityIQ 8.2 - User Guide for Certifications, Compliance, and Reports, "Policy Composition Certification," Page 10: "Policy composition certifications are used to review the details of a policy to ensure that it is still valid and accurate. For example, you might create a policy composition certification to review the rules associated with a separation of duties policy." This confirms the action is for reviewing the policy's definition.

2. SailPoint IdentityIQ 8.2 - Administrator Guide, "Managing Policy Violations," Page 421: This section details the actions available from the Policy Violations page. The standard actions listed for a violation owner are "Remediate," "Allow Exception," and "Forward." The option to "Schedule Policy Composition Certification" is not listed as a direct remediation action for a violation.