Hello All,
I have a workflow in IdentityIQ for creating Azure Admin accounts with a 2-level approval process:
Current Setup:
-
Level 1: Parallel approval that goes to multiple role owners based on the roles selected in the request
-
Level 2: Serial approval after all Level 1 approvals are complete
Issue: The approval form currently displays ALL requested Azure roles to ALL approvers in Level 1, even though each approver should only see and approve the roles they own.
Requirement: I need to filter the approval form so that each approver only sees the Azure roles that they are responsible for (i.e., roles where they are the owner).
Current Approval Form Structure:
xml
<Field displayName="Azure Roles" multi="true" name="azureAdminRoles"
postBack="true" readOnly="true" type="String">
The azureAdminRoles field is a multi-valued string field that contains all requested role names.
Are there any best practices for creating dynamic, approver-specific approval forms in parallel approval scenarios?
Thanks in advance!