Data owner approval is getting triggered for empty workgroup

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.2

Share all details related to your problem, including any error messages you may have received.

Hi,
Please have a look on below scenario and let us know your suggestions.

  1. We integrated service now module to create RITM for provisioning
  2. WE have set up 2 level approvals (Manager and Entitlement owner)
  3. We created workgroups for all applications and added more than one entitlement owner as members in workgroups.
  4. We gave that workgroup name in entitlement catalogue.
  5. Request was routing correctly to manager approval and next to entitlement owner approval(workgroup)
  6. Later for some reasons we removed all members from a workgroup and removed the workgroup name in entitlement catalogue. (Which means only Manager approval is required for some applications)
  7. But when we remove members from existing workgroup , requests are getting routed to that empty workgroup and waiting for approval. (obviously it should bypass second level approval as there is no entitlement owner in entitlement catalogue and there is no members in that workgroup).
  8. This happens only when we remove members from existing workgroup.

Can anyone suggest how can we address this. Thanks !

2

I think, you can control it by approvalScheme. if you don’t want owner approval then only pass manger.

<Variable initializer="manager" input='true' name="approvalScheme"/>

if you both then 

add by comma like manager, owner
3

Hi @Preethi , Please let us know if this helps.

4

Hi @pravin_ranjan

We require owner approval for some applications and for other applications only manager approval is required.
When we remove owner field in entitlement catalogue how does it goes to application workgroup for approval.

Thanks!

5

Hi @Preethi

Can you put some logs in Rule : Approval Library and see if it’s going through fallbackApprover.

Method name should be buildOwnerMap.

if that so, You can update approval scheme at starting point of workflow based on application name but you have to create a copy of OOB file and maintain it.

If we are talking here LCM Provisioning WF then u can play with plan object.

6

Hi @pravin_ranjan

Will check and let you know.
Thanks for the update!!