1.2 Understanding Synchronization and Reflection

Access Review can collect data from identity and application sources that are not connected to Identity Manager. The Access Review driver allows you to synchronize changes to identities and applications with user and resource objects in Identity Manager. You can also reflect collected user identities and application data as resources in the Identity Vault. The driver provides Global Configuration Values (GCVs) that allow you to delete or disable user objects or delete these resource objects in the Identity Vault. Alternatively, you can remove the association between the user object and the identity in Access Review. For more information, see “Understanding Synchronization and Reflection” in the NetIQ Access Review User Guide.