Birthright Role, Business Role , notification

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

Hello Community,

I want to be able to write to a csv file and notify managers based on a birhtright role or a business role assignment to the identity and each time the role changes, i have to change it also on the csv file what is the best practice to do this?

Many thanks,

2

Hi @torry_salamat

Please explain the requirement in detail. Then it will be easier to help you.

Thanks

Manish Singh

3

Hi @torry_salamat , It can be done two ways -

  1. Assignment rule - but that would be big change . you would have to change all the assignment rules .

  2. Refresh identity workflow - Explore this option and do your technical due diligence. If you have the required data then this would be good option .

4

If the identity gets assigned a birthright role right away i need to write down on a csv file with the following headers : Column Identity and Column Role and fill them with the identity and the role that it got assigned. The csv file would be sent through a run rule task that is going to be scheduled once a day

5

Hi @torry_salamat

You can run an ad hoc rule daily to get all the users who got the birthright role, and add the data to a CSV file on a daily basis.

That CSV file you can then use in your run rule task as per your logic.

6

Hello, Thanks for your answer,

Do i need to loop through all the identities ? because if so it’s going to take a toll on the servers

thanks

7

Hi @torry_salamat

Get All the birthright roles and then do the filter instead of looping all identites.

Thanks

8

Hello back @msingh900 ,

Thank you for your answer. I understand what you mean however suppose we have done that. For the first assignment of a birthright role,we are gonna mark on the csv that the identity got the role but how do we detect that the identity has lost the role at one point (like in the case of deletion) ? Because i also need to mark on the csv that the role has been deleted from the identity and as far as i know there are no snapshots for roles..

9

@torry_salamat

In this scneario, it will be better to create an attribute for your birthright role assignment. Create a lifecycle event of type Attribute Change and trigger a workflow whenever this change happens and write your logic in the workflow step based on the requirement.

10

Hi @msingh900,

We could have done that but sadly we don’t have a specific attribute .. We only have these bundles without a specific attribute for the business roles they are assigned manually