How to avoid the form while lunching the LCM workflow

[charankoona]

Dear Team,

can you guys help me, how to avoid the forms coming up while LCM is trigger for the user.
Note:

1. form is coming while users has multiple accounts in same application.

Thanks,
Charan.

[enistri_devo (Emanuele Nistri)]

Hi @charankoona,

which workflow/event you referring to?

[charankoona]

Hi @enistri_devo ,

I am calling the LCM provisioning workflow from my custom rule with the plan for IIQ role add/remove for AD. but the user has multiple AD accounts.

thanks.

[enistri_devo (Emanuele Nistri)]

why dont you create a plan for every single account?

[charankoona]

it is not possible for example, i am trying to remove the Business role it contains AD group, and the user has 2 ad accounts normal and admin account.

in this case i am trying to remove the role based on active and inactive status.

[enistri_devo (Emanuele Nistri)]

See those topics:

https://community.sailpoint.com/t5/IdentityIQ-Forum/Provision-to-multiple-accounts-via-standalone-rule/m-p/235495

https://community.sailpoint.com/t5/IdentityIQ-Forum/LCM-Provisioning-for-Multiple-Applications/m-p/114329

[Arun-Kumar]

Hi @charankoona,

This can be achieved through adding the accountSelector rules in the IT role. These rules are designed to automatically select a target account for role provisioning. accountSelector rule apply only to IT roles. In the event that accountSelector rules are not defined, a request for LCM for the role will require the user to choose an account(Account selection form) for the provisioning request.

Once the accountSelector rule has been created, you can attach it to the IT role as follows.

Regards,
Arun