Creating a way for a manager to only have the ability to see users under them that are active and not inactive/disabled

I am looking for a away for a manager once they access the Managed User Access quicklink in IdentityIQ 8.2 to only see the users that are active and not inactive.

Is there a rule I would need to put in place in the quicklinks to make this happen. I have a attached a screenshot of the page I am talking about.

You need to look into Quicklink Population config for manager. You can access it
Global Settings → Quicklink Populations → Manager

1 Like

Hi Derrick,

What about Match custom criteria with value inactive != true in the Quicklink mentioned by Khrisna

Like:

(I have not tested this, but looks like this is the way to go :slight_smile: )

– Remold

1 Like

Remold/Krishna,

I have inputted the small criteria as shown in the attached screenshot, but now I get everyone that is active. I only need the ones under the manager who are active.

Hi @derrickthomasvdot

You are selecting the criteria match any instead of do match all which will check against all the conditions checked below, this way manager can request only direct reports and who are active.

1 Like

Hi Satish,

I have it now set correctly but the manager himself is also listed to request access for himself. How do I remove that action as well?

@derrickthomasvdot
Do you mean user himself shouldn’t able to raise the request?
Can you let me know with current configurations you have what is the behavior of users who doesn’t have any reportee’s at all, can you share the screenshot.

That is fine, Manager has to request for himself/herself as well rite.

Also I see from your screenshot that you used filter inactive != false as match criteria. It will display only inactive users, make it as inactive == false or inactive != true

We do not want the manager requesting for himself. we would like the option of having that ability nullified, only a manager’s manager should be able to request for him. How can I make that go away?

On the QuickLink page for the managers goto tab QuicLinks
image

At the right of the row for Request Access click on Configure

Deselect: For Self
image

I hope this answers your last question :slight_smile:

– Remold

Hi Remold,

yes, I have already set that as well and still shows the same. Screenshot below. The access in the screenshot is for the identity, Manager.One below:

Here is also what is setup for a Manager:

We only need the manager to see access for his end users, not including manager themselves

Have you checked if the manager also falls within any other QuickLink Population (for instance Everyone) and is Request Access enabled for that QuickLink Population?

– Remold

1 Like

Remold,

That did the trick! I had the request access quicklink enabled for self in another population. Thank you all!

2 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.