Approval Required

[niket345 (Niket Telavane)]

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

Hello Experts,

I have question that If we update a phone number via the “Manage Identity”, “View Identity”, (search and select an Identity), “Edit Identity” it will get sent for approval. If we do the same task via the “Identity Warehouse”, it will not be sent for approval.

is there any way to include the approval for Identity warehouse update.

Thanks

[kjakubiak (Kamil Jakubiak)]

Hi Niket,
Yes it’s possible - as long as you are using any LCM requesting features then the workflow which you execute is LCM Create and Update, however when you change attributes in identity warehouse - then you don’t use LCM anymore (as you actually need no LCM license to do that). In this case workflow which is started is called Identity Update and it has a variable approver which by default is empty but you can just set it to whatever you want or write a rule to calculate it dynamically.

[niket345 (Niket Telavane)]

@kjakubiak

you can just set it to whatever you want or write a rule to calculate it dynamicall

yeah that’s super. can we add manager, new manager under approver with hardcode value.

[kjakubiak (Kamil Jakubiak)]

Unfortunatelly this workflow is not as sophisticated as LCM Create and Update where you can just type “Manager” or “newManager” - in this case you have to write a rule which will return managers identity from provisioning plan - but in the end it should not be that complex. See code below (didn’t test it)

import sailpoint.object.Identity;
Identity requestee = plan.getIdentity();
Identity approver;
if(requestee != null) {
approver = requestee.getManager();
}

if(approver != null) {
return approver.getName();
}else {
return "spadmin";
}