Please share any other relevant files that may be required (for example, logs).
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Capability PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Capability displayName="Task_FullAccess" name="Task_FullAccess">
<Description>This capability will provision Full Task Definition, Scheduler, and Result permissions in IIQ.</Description>
<RightRefs>
<Reference class="sailpoint.object.SPRight" name="FullAccessTask"/>
<Reference class="sailpoint.object.SPRight" name="ReadTaskResults"/>
</RightRefs>
</Capability>
Share all details about your problem, including any error messages you may have received.
Hello, SailPoint Developer Community!
My organization would like to make a custom capability that allows users to have full access to the Tasks, Scheduled Tasks, and Task Results page. I found the SPRight combination above through SailPoint documentation, but it does not seem to grant full access to Scheduled Tasks like it claims it should with this combination.
Is there another combination that I should be looking at to have full access to Tasks, Scheduled Tasks, and Task Results without having full admin capabilities? Thank you in advance!
FullAccessTask :
Gives the user access to Task Definitions, Scheduled Tasks, and Task Results (via Setup > Tasks). The user can create, edit, delete, and run task definitions and task schedules. On Tasks and Task Results, this right allows access to any task and any task result (with the ability to delete or terminate results that are not signed off or are awaiting signoff). On Scheduled Tasks, however, the user can see and manage only the task schedules they own (that they created), not schedules owned by other users. This right does not grant access to the Signoff Status widget.
Hi @lesliepierrot - scheduled tasks here are only viewable by system administrators or the user who scheduled the task. Identities with your custom capability assigned will be able to schedule tasks but only see schedules they have created.
They will not be able to see schedules created by other users.
To meet that requirement, you would need to develop something custom to handle this, like a custom form or plugin.
As a note, I was able to get this to compromise by adding the SPRight “ViewTaskManagement” so that we can view the Scheduled Tasks in the Admin console.
