Batch Revalidation Workflow

Hello,

We have the following requirement that I am trying to address using a batch workflow.

Every six months, sponsors should be able to review non-employees from a specific organization they are responsible for and decide if those non-employees should continue working or not. The idea is to have a batch workflow that, once triggered by the sponsor, displays a list of all non-employees. The sponsor reviews the list and, for each, selects either “active” or “inactive.” If someone is marked as active, the end date for the employee’s assignment is extended. Otherwise, the end date is set to the today.

I was searching for a table or page to edit but couldn’t find anything suitable. Also, in the batch workflow, there is an action called ‘Profile Select,’ which cannot be deleted or edited in terms of what the workflow performer would see in the UI (different columns, button etc).

Does anyone have any idea how this can be implemented with batch workflows? Is there a possible workaround using update workflows maybe so that employees and their assignments can be updated in bulk?

Thanks in advance.

One idea that I have thought about is to create a certification campaign. For example:

The certification could be sent to the sponsor. If the contractor is no longer needed, the sponsor would revoke the entitlement.

Then you could create a workflow on the Certification Signed Off Trigger filtering on the name of your Contractor Certification Campaign.

In the workflow, you could use the List of Access Review Items to review the decisions ( list-identity-access-review-items | SailPoint Developer Community)

If the specified entitlement was revoked, you could then use the Update Account API to set the end date ( update-account | SailPoint Developer Community). If it wasn’t revoked, you could set the new end date forward.

That’s a really good idea. Thank you.
For this to work, we’ll have to mark an attribute as entitlement so it can be aggregated from NERM. And then to have a certification campaign IN IDN assigned to sponsors so they can approve or deny it. Based on their action we would trigger a workflow on NERM side to terminate or extend a non employee.

Of course, it would easier if we could create and customize a batch workflow per our needs in NERM.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.