Customizing the Rapid setup - Mover

Which IIQ version are you inquiring about?

IdentityIq version 8.4

Please share any other relevant files that may be required (for example, logs).

Below is the log about the mover
Mover log.txt (60.3 KB)

Below is the workflow of the mover
Rapidsetup - Mover custom one (6.4 KB)

Share all details about your problem, including any error messages you may have received.

I am to add the step in the mover process where it has to be approved by the workgroup member.

I have shared the workflow that is been used for the mover process and added the approval step and the workgroup in the default workflow.

I have added the same approval step for the joiner and leaver and it’s working fine.
it’s going with approval but for the mover process, I am unable to get the approval.

Move Process use case

  1. to read the data from ERP ( which is going fine)
  2. when the refresh identity task is ruined then it should trigger the mover event ( which is going fine)
  3. should the approval by the workgroup member( which is skipping and completing the workflow)
  4. should update the manager or the job title in AD ( which is working fine)

To update the manager or the job title, I am using the attribute synchronization option by mapping the target value. No additional access is been changed on the user account only the value is updating in AD.

My main problem is getting the approval step during the mover process the process should be completed only once the approval is done successfully.

Thanks for your support in advance.

Hi @RiyazuddinM
First, check if approvals are enabled globally by navigating to Global Settings → Rapid Setup Configuration → Mover tab, and enabling ‘generate Approvals’.

Secondly, you likely need to pass the workflow name under the variable ‘approvingIdentities’. Since this is already working in your joiner workflow, cross-check there for confirmation.

Hi @Arpitha1 ,

Thanks for your response,

Yes, I have enabled the option in the global setting for generate approvals. and also, I have passed the same approvingIdentities in the workflow as same as the joiner and leaver step.

Thanks
Md Riyazuddin

I don’t see ‘approvingIdentities’ in your workflow. Instead of variable ‘workgroupName’, can you mention ‘approvingIdentities’ ?

Hi @Arpitha1 ,

I tried both the methods as mentioned below,

but the workflow is not going with the approval


// first method I tried with
<Variable initializer="identity" input="true" name="approvalScheme"/>
<Variable initializer="IAM ADMIN WG" input="true" name="approvingIdentities">
    <Description>List of identities and/or workgroups names/ids that should be involved in the approval
      process.</Description>
  </Variable>

---------------------------------------------------------
//second method I tried with 
<Variable initializer="identity" input="true" name="approvalScheme"/>
<Variable initializer="workgroupName" input="true" name="IAM ADMIN WG"/>


Can you pass the variable ‘approvingIdentities’ in 'Process Plan" step. Also please attach your joiner wf here, just to check the differences

Hi @Arpitha1,

Please attachment below

Rapidsetup - joiner Custom one.xml (9.6 KB)

thanks

Hi @RiyazuddinM I can see plan is null from your logs. Can you make sure that, any role should match the mover criteria so that role will be added inside plan.

Since plan is null, none of the approvals might have not created.

@RiyazuddinM Check now.

Hi @Arpitha1 ,

any suggestion regarding what kind of l role you are talking about?
since there is no access change on the user account during mover. |
|

Here’s the key point: In the current rapid setup mover workflow, any change in access, such as acquiring a new role or entitlement, will trigger an approval process.

You can configure a business role and set assignment criteria that align with your mover filter.

currently no change in access

can we create a dummy role, just to achieve the approval step.
and how we do it

Yes, you can create some sample roles and test it out. Refer this link to know details on role management.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.