Workflow to Approve the Business Role Definition

[Chenyang]

Hello IdM Masters,

I wonder it is possible to setup a approval workflow in IdM to approve add/remove privileges to/from a business role?

I know we are able to setup such a workflow in GRC Access Control. Are we able to do the same in IdM?

Thanks,

Chenyang

[devaprakash_b · Accepted solution]

Hi chenyang,

As suggested by Norman, We need to create an custom entry Type and custom attributes and define a workflow as below

1. Create custom entry type and custom attributes.
2. Create a UI task which accepts the Role for which the privileges needs to be added or removed.
3. when submitted, a request needs to be created of new entry type.
4. The new request object holds the Role and privileges in form of attributes.
5. Define the approves based on the Role MX_OWNER/MX_APPROVERS.
6. Define approval tasks either through event handling tasks for the attributes or link an Ordered task to be executed after submitting the UI task.
7. Define an attribute which holds the approvers in the request object.
8. Create an approval task based on the approvers attribute.

We have execeuted a similar workflow by creating an custom entry type and it is working perfectly.

Regards,

DP

[Chenyang · Accepted solution]

Thank you Norman and DP. I will give it a go.

[normann]

Hi Chenyang,

one approach would be a custom request object. You create a request where you enter the details for the role change and go through a workflow with that request object. After everything is approved you perform the change to the role.

Regards

Norman